Hello,
In the past SteatchWatch developed various features to ingest the logs from Proxy (using Proxy Ingest) or even sniff the URLs from the network (using Flow Sensor). This was before Cisco time. Can you share any recent news/features on adding th...
Hello Cisco ISE Experts,
The customer is concerned about Switches with broken SXP or incomplete TrustSec configuration etc. What are the strategies for checking 500+ switches for health? The core is configured for SXP and distribution and edgefor inl...
Dear Cisco ASA AnyConnect Experts, Can you please clarify what are the advantages of pre-deploying HostScan (aka non-ISE traditional Posture) agent?The only few official part of documentation I found are:"If you are using AnyConnect Posture (HostScan...
Hello Cisco ISE Experts, I checked documentation including patching FAQ and prior forum post and not clear what happens when one tries to new node to ISE deployment. Assume existing deployment is running with Patch N while the new node is just factor...
Hello ISE and TrustSec experts, Can you please provide explanations or better, point towards Cisco guide explaining numbering suffixes for SGT? Why on most occasions SGT ends with -00 suffix, but not always?For example, for default TrustSec_Devcies S...
@giovanni.augusto wrote: MSCHAPv2 for user authentication
It is strange that MSCAPv2 is not used in any of the examples on Cisco websites or on the Internet. Hope you are fine with users with expired passwords, or it is handled by "User Fialed and Ma...
Dear Cisco Experts,
I would like to share some insight with you all. I decided to test if TEAP Chaining will work with method1:Certificate for the machine and Method2:MS-CHAPv2 for User authentication. No matter how hard I was trying on Wired or Wire...
@Hilda Arteaga - Can you please explain, the "follow/friend" option is not avalable. What should I do to automatically follow some authors? I checked the Community Help section "How do I follow a community member" it states:
"If you want to follow an...
Verify Deploy generates "61031: TrustSec deploy verification failed to reach NAD" for each device (without exception). From your experience, what are the pre-requirements?
Do I need to provide SSH credentials for each NAD/device? I tried to check t...
BRKSEC-3690 Advanced Security Group Tags (SGT) The Detailed Walk Through recommends the following main commands:
SGACL Download Errors• Validate AAA is reachable with “show aaa servers”• Validate the device has a PAC with “show cts pac all”• Validate...
