"The What?" - In this post I want to go over configuring & verifying multicontext mode on Cisco ASA. To understand what security contexts are see: ASA Security Contexts Tidbit "The Why?" - Using multicontext mode on Cisco ASA provides some valuable benefits. This mode allows us to partition the ASA into multiple "virtual" firewalls which could allow you to utilize one firewall for multiple customers. This mode also allows you to deploy different security policies perhaps f

"The What?" - In this blog I want to explore 1 of the 2 ASA modes, Transparent mode. In this mode the ASA is no longer in routed mode acting as a L3 routed hop. The ASA actually operates as a L2 bump on the wire. "The Why?" - A major benefit is that you can actually insert a transparent ASA into a network without having to modify IPs on other devices. This can be clutch if wanting to segregate and essentially split a vlan up. Some other benefits include simplicity of conf

"The What?" - I want to expand on some of the other FlexVPN related blogs shared earlier. This lab will be expanding from an earlier lab where I utilized a Dual Hub FlexVPN in a single cloud topology. For reference that post is here: Configuring & Verifying FlexVPN Redundancy with Dual Hub & Single Cloud "The Why?" - In this post I will be focusing on FlexVPN redundancy with dual hub & dual cloud. This configuration will be a tad different from the previous FlexVPN redunda

In this post I want to demo/breakdown configuring a point-to-point FlexVPN that uses certificate authentication. This lab demo will use PKI VPN authentication between two directly connected peers by utilizing an IOS PKI that has been referenced in other blogs. We will also explore ways to verify it. Lastly, I will share how to understand some valuable debugs. I wont be covering IOS PKI in this post so to see more about understanding/configuring IOS PKI see: Configuring, Ve

I want to walkthrough enabling the External RESTful Services (ERS) APIs in Cisco ISE 3.0 so that we can consume ISE APIs in later posts to do a variety of things to include endpoint creation/manipulation, network device creation, and many more tasks. Once we enable and configure ISE we will briefly go over the ISE Software Development Kit (SDK). A few important things to note: ISE ERS APIs use HTTPS protocol on port 9060 These APIs allow CRUD operations ERS is based on the H