Hi,
By reading many times this article would like to clarify the following on a Cloud only environment (Azure AD and Intune, NO ADCS and NO traditional AD):
Cisco ISE with Microsoft Active Directory, Azure AD, and Intune - Page 2 - Cisco Community
...
Hi,
Requirement is to enable dot1x wired authentication/authorization for Intune registered devices. There is only Azure AD and Intune. There is NO On premise component (no on premise/traditional AD, or ADCS)
According to the following link, we need ...
Hi,
Please can you confirm if FMC H.A is supported on Azure. I am running version 7.2
On one document is not mentioning Azure, and on the other it is mentioning Azure:
According to the 7.2 FMC Admin guide, H.A is only supported on Vmware, AWS and O...
Hi,
We see "Encrypted Visibility Engine" (EVE) on the FTD is supposed to replace the SSL Decryption feature.
Our requirement is to fully detect and block malware over encrypted traffic (HTTPS).
At the present time (May 2023) is safe to use EVE inst...
Hola,
"Encrypted Visibility Engine" (EVE) esta disponible en el release 7 de FTD. Es correcto afirmar que EVE reemplaza a SSL decryption?
Por ejemplo, Si tengo solo EVE habilitado, pero SSL decryption deshabilitado. Que sucede con las reglas en el ...
Thanks Greg, so the only option is to use the ADCS for the user/device certificates as mentioned on your document.
ADCS is a traditional solution. if we want a cloud only solution, SCEPman could be used. Is Cisco ok using Scepman instead of ADCS?
Tha...
@Greg Gibbs sure, I added the 2 following posts:
ISE 3.2 Azure AD - Intune authentication/authorization certificates - Cisco Community
ISE 3.2 dot1x authentication with Intune issued certificates - Cisco Community
Hi,
After the endpoint is registered with Intune, I see by default that Intunes push/deploy a certificate for the endpoint signed by "Microsoft Intune MDM Device CA".
Can this certificate be used for authentication and authorization? instead of us...
Thanks for the reply.
I just went to lunch, and when I come back, I see now the interface with the interface group attached to it on thje "Devices / Device Management / Interfaces" output.
Looks like it took a while to show it, as 45 mins ago (of c...
So it still works, even if you dont have interface group attached to the new interfaces.
My setup is similar to your scenario. I have a production firewall with many interfaces and security groups (one for each interface/subinterface).
I am creating ...
