Security

Since Cisco announced an intention to unify software version across routing and switch platforms, we have already seen the first software release of Denali 16.1 on Cisco IOS XE switches. Subsequently, Cisco has also released the first common software version between router and switch with Denali 16.2.1. While you can upgrade a switch as you normally would, upgrading a router requires a closer attention. In this article, we will show you how to upgrade an ISR 4000 to Denali 16.2.1. We will be using ISR 4321 running IOS XE 3.6.

Cisco Identity Services Engine (ISE) has been around for a number of years now and has gone through different software revisions, from 1.0 to the most recently released 1.3. Lab Minutes has been offering free extensive online configuration video library since ISE 1.1, covering from environmental setup and basic authentication to more advance features like posture assessment and EAP-chaining, and ISE 1.2 with more feature updates. With the release of ISE 1.3, Lab Minutes is adding even more lab videos to make sure that our audiences stay up-to-date with the technology, and are able to get the most out of functionalities available in this release.​ http://www.labminutes.com/video/sec/ISEThis article is written under an assumption that you are a novice user that know very little about Cisco ISE and would like to start learning using ISE version 1.3. We will help you navigate through almost 100 ISE videos available on Lab Minutes website and point you to videos that are the most relevant while eliminating those that are either redundant in the previous versions or obsolete so you will not be wasting your precious time on them.

Dynamic Multipoint VPN (DMVPN) was originally set out to provide a more economical alternative to other WAN technologies like Frame Relay and MPLS. During the first few years after its inception, implementing DMVPN was a bit of a challenge as there were limited features, bug issues, and people lack of understanding. Now that the difficult time has passed, DMVPN is very much considered a mature technology and has become a viable low-cost WAN solution due its scalability and security, not to mention many features that have been added over the years. In addition, as the cost of internet continues to drop, and given the reliability of internet today, people begin to feel more comfortable running their business applications, even VoIP, across the internet so it is no longer rear to find DMVPN being used as a primary WAN connection. This article will guide you through DMVPN videos that are available on our website, either as free online steaming or video download, and provide overview of how to best utilize these video to maximize your learning experience. 

Since the release of Cisco Identity Services Engine (ISE) version 1.0 and 1.1, many early adopters have been looking forward to ISE 1.2 especially for enhancements and introduction of new features. Now that it is here, ISE 1.2 certainly shows a big improvement from its predecessors in terms of scalability (max 250,000 endpoints in a 44 node deployment), functionalities, and reliability, not to mention the support of 64-bit operating system and the new SNS-3400 hardware appliances. This article will guide you through ISE 1.2 videos Lab Minutes have created to help you understand not only what features are available, but most importantly, how to configure them. 

Cisco Secure Access Control System (ACS) has been around for a number of years since version 3.x and 4.x, and is one of the most popular products in the market for network Authentication, Authorization, and Accounting (AAA) server in enterprise network due to its variety of supported features and robustness. This is true for the two commonly used protocols; RADIUS, used in network access security, whether it is VPN, wired or wireless 802.1X access, and TACACS+, used in network device administration.

This article serves as a guide to your journey of learning and configuring Cisco Secure Access Control System. We will guide you through how you can best utilize the videos that have been made available on our website to maximize your learning experience.

Cisco Identity Services Engine (ISE) has been drawing a lot of attention in the recent years. It is the product released by Cisco to promote identity-based network access security. The product is, by no mean, a standalone solution but merely a component of an architecture that requires collaboration of multiple network entities as a whole. Since you are reading this article, I assume you either start taking an interest on ISE, or already have embarked upon an ISE implementation whether it is in a lab or production.This article serves as a guide to your journey of learning and configuring Cisco Identity Services Engine. We will guide you on how you can best utilize the videos that have been made available on our website to maximize your learning experience. Links to relevant videos are provided under each section. All of our videos are created primarily on Cisco ISE version 1.1.2. 

If you are currently deploying or planning to deploy Cisco ISE to handle your guest access authentication using Central Web Authentication (CWA), you may not be very fond of the Cisco default login page. Although an ability to replace the Cisco logo and change font and background color are sufficient for some people or organizations, others may find options Cisco provide to customize the portal page on the web GUI rather limiting. Fortunately, Cisco ISE allows you to create a full custom HTML for the login page and several other pages, which gives you complete freedom to make the pages look any way you like. However, greater flexibility come greater responsibility. What this means is ISE will relinquish complete control on all of these pages and it is totally up to you to make them match the flow of the login options, process, and configuration on ISE.

As you all know, Cisco ISE 1.2 supports MDM integration, although it might still be unclear to many people on how ISE and MDM play together as they might be viewed as completing products with overlapping functions. Here we have compiled a list of bullet points that you might find useful and need to consider to decide whether this is the right strategy for you. Please note that there are many MDM vendors that ISE supports and their functionalities may vary so the list provided here is generic and not specific to any MDM vendor.

As part of Cisco ASA 1000V installation, you need to decide if you want to run the ASA 1000V in VNMC or ASDM mode. Since the mode cannot be changed after the installation, you will need to pick this wisely. Here are quick comparisons that might help you decide which mode is appropriate to your deployment.