If you look in the Cisco forums for scripts to backup ASAs you'll find various SSH / Expect , complicated examples... not sure why since in 2006 I showed it can be done with a single wget command ;-)
Recently I needed something that would support Multi-Context firewalls, so I pimped my ...
I've been meaning to do this for a while, but I've finally hacked Cisco ISE into VirtualBox for home lab learning and experimentation.
For those familiar with my ACS in VirtualBox post you should notice a very similar theme.
This is a good one where Android devices will provision but Apple iOS will not.... and it only happens with Publicly Signed Certificates (installed on the ISE PSN).
As per the screenshot, the iPhone profile installation fails with the error Profile Installation Failed and The Registration Authority's response is ...
Most people have migrated to AnyConnect or abandoned Cisco altogether in disgust that Remote Access VPN is chargeable but there are a few installations out there who hang onto their beloved old yellow client before they send it to the farm in the sky.
I recently came across one of ...
NTP Authentication is a recommended best security practice; there are a lot of documents out there on how to setup NTP authentication between two Cisco IOS devices but anything between Cisco and LINUX is few and far between.
I have setup a LINUX Server (Redhat/CentOS) box, that will act ...
ISE 1.1 had horrible web portals which didn't render well on mobile devices at all (which was odd for a BYOD solution), anyway, Cisco have fixed that now in 1.2 with the ability to enable a mobile version... but what if you want something totally custom that ...
Keychains hold passwords, certificates and general secret stuff - only do this if you understand the Apple will have access to this.... well assuming they can crack your keychain password (which they probably can).
Synchronising a keychain across macs could be useful, for example, having a dedicated keychain for WiFi credentials ...
The checkpoint sk article isn't that helpful... what it should say is... If you have your encryption domain set as "defined by topology", then check your topology!
