How to add an ESA’s DKIM Signature to a DNS TXT Record

Hopefully, this post will help you save a lot of time when trying to add a DomainKeys Identified Mail (DKIM) signature to a Windows server. The motivation for this post is simply because I spent more than enough time trying…

Configuring D-VTI and S-VTI for Hub & Spoke Deployments

In this post, we're going to configure D-VTI and S-VTI between two CSR1000v routers to demonstrate hub and spoke deployments. The two devices used as shown in the topology below are R9 and R10. R9 will act as the hub…

Configuring IPSec Site-to-Site VPN’s using IOS-XE as a CA Server

In this post, we're going to configure an IPSec site-to-site VPN with two CSR1000v routers. The authentication between the two routers will be performed using digital certificates issued from a separate Cisco CSR1000v router which is acting as a CA…

Configuring FlexVPN Point-to-Point IKEv2 S-VTI with PKI Authentication

In the last post, we explored how to configure FlexVPN point-to-point IKEv2 S-VTI's with preshared keys. In this post, we will do the same but this time using another CSR1000v acting as a CA server. This will allow us to…

Upgrade Firepower Devices before March 5th 2022 – Field Notice: FN – 72332

If you use the Cisco Firepower Security Intelligence services and are using versions ranging from 6.1 to 7.1 then this field notice may be for you. After March 5th 2022, Security Intelligence updates will fail because the CA certificate used…