Introduction

This will be the final installment in this NSLOOKUP Primer series. Last time, I talked about MX & SPF TXT records here, but I didn’t touch on DMARC & DKIM TXT records which are also highly encouraged to help add additional layers of security to your email domain.

Within Cisco Umbrella Secure Internet Gateway (SIG) many features are at our disposal, such as Secure Web Gateway, DNS-Layer security, Cloud-delivered firewall, and many more. Information about Cisco Umbrella SIG can be found here.

https://umbrella.cisco.com/products/sig-product

In a previous blog I’ve talked about Cisco Umbrella DNS-layer and how to secure your organization at the DNS level. In...

Cisco SD-WAN (formally Viptela) is quickly becoming the go to WAN solution for Cisco customers. As companies are looking to replace their aging DMVPN solution, Cisco SD-WAN has become the logical choice. Companies can stick with the same ISR platform running IOS-XE that they already know, and in some cases can upgrade their existing routers to work with SD-WAN. But this blog isn’t a sales pitch...

Hey there! Today we will be looking at how we assign a user or Workspace, to a specific Hunt Group in our Webex Control Hub environment, in just a few simple steps. Cisco does a great job of streamlining these Move’s, Add’s or Changes in the Control Hub, by providing us with very user friendly GUI. If this is your first time, no worries, you’ll learn your way around in no time. Let’s dive in and...

There may be certain situation when you need to reset a Cisco FTD appliance back to factory default to get a clean start. One such example is during a deployment I encountered a Cisco Bug for FTD version 7.0.4 locally managed by FDM. The bug caused a corruption in the database that cannot be repair and configurations from the FDM are not synced with the LINA, the ASA portion of the FTD. There...

Endpoint Captive Portal Detection - Why?

This blog assumes that you have a general understanding of ISE Central Web Authentication. Endpoint Captive Portal Detection plays a critical role in improving the end-user experience when connecting to a captive portal protected WiFi network, such as an ISE CWA protected WiFi network. The captive portal detection brings to the attention of the user that...

Access lists and SVIs have been around forever, and while applying access lists to physical interfaces seems to logically sink it quite easily, access lists on SVIs interfaces seem to trip people up. This blog will cover that scenario as well as some other access list basics, hopefully by the end you’ll find the concepts cemented.

I wanted to cover a new IOS feature that I learned during Cisco Live. VOIP Trace for CUBE is a new feature that can help engineers troubleshoot issues on CUBE deployments. It’s enabled by default, but you will need at least IOS-XE 17.3.2 or higher.

In my last nslookup blog, I talked about some basic DNS troubleshooting. If you missed it, here’s the link. This time, I wanted to dive in to how I use nslookup for email info gathering and troubleshooting.

Firepower FTD Remote Access VPN SSO using SAML and Azure AD, with Azure AD Conditional Access to Duo 2FA, and Cisco ISE for Authorization and Group Policy Assignment

There are multiple components to this solution, and while there are a few different approaches to accomplish the end goal, I wanted to focus on a solution that didn’t require an onsite Duo Authentication Proxy server. This blog will...