Other Security Subjects

I ran into an Issue while configuring my router where I exhausted all 255 egress ACL polices on Sub interfaces on a Bundle-Ether interface.  I then decided that I would just create a single egress policy on the Main interface of the Bundle instead.  ...

Hello Guys, I hope you are well, Please, I would like to have the basic radius configuration on C9200 switch to connect to the radius server in order to use the authentication of my AD accounts. For the radius server I've configured the group retriev...

Hello,FMC and FTD's 7.3I  have a routing issue where my packet tracer is telling me there's no adjacency, yet I have a static IP route setup for the next hop. The FTD is trying to send my packet to the default outside vs. my next hop. Does static rou...

Hello, Could you help me with some guide to perform the integration between Secure Network Analytics and ACI?We need to perform traffic flow analysis for the following devices through ACI:- Red Hat Enterprise Linux 6.1- Microsoft Windows Server 2008T...

Hi,I've read various threads on this topic but still un-clear how this is meant to work.   I have 802.1X deployed and working - some users are reporting problems when connected via an HP Docking Monitor.The LAN switch (Cat9300) port stays UP/UP irres...

Attached is a brief list of cybersecurity use cases of AI assist around security products that I could find and think of. Looking forward to thoughts and inputs from fellow community members.

Hi there, We are about to upgrade our ISE nodes to 2.7 soon.And before upgrading, we wanted to make sure that our nodes were ready for upgrade,so we used the URT tool, which went successfully. But we had this warning during the process :% Warning: Sa...

Due to the recent vulnerability https://terrapin-attack.com/ that is a MITM attack against weaker SSH algorithms. We are wanting to move our SSH authentication and algorithms to non affected algorithms including newer security algorithms such as ECDS...

Hello,we've a Deployment of 2 ISE Version 3.1 P6 and a AD-PKI with Root- Intermediate- und SubCA'snow we want the ISE to act as SubCA of the IntermediateCA for SCEP to enroll ClientCerts for Linux-Clients and maybe other Devices, this should be possi...

Hi all,I made a major goof while accessing the GUI on my Cisco RV320 router. I accidentally set the HTTPS port to 22 in the settings. Anyone have anything that could help me get back into the rou

Hello everyone, Are there any restriction on using non-managed switches with the NAC?We have some offices with non-managed switches (TP-link), each switch is connected to a Cisco managed switch to an "access port", the cisco managed switch port confi...

Hi everyone,Is there any way for the Cisco ASA to inspect inbound DNS queries, for example - [INTERNET] --> DNS QUERY --> CISCO ASA[INSPECT] --> Authoritative DNS serverI would like to implement a policy on the ASA that inspects DNS and matches it ba...

I have looked «everywhere» , but have not been able to find an answer to the following question: I am currently implementing Guest Access on our Wired L2 switches. In our network we mainly use the following types of L2 switches: C3560CXC3800C9200CXC9...

Hello, I would like to discuss a scenario where an MPLS provider have a large no of provider owned CPEs. These are edge devices which connects to customer devices.  We donot have access to the core network. Question: 1) Is it worth monitoring the CPE...