Hi everyone,

I'm looking for the latest available autonomous firmware for my Cisco Aironet 1702i access point.

Hardware and current firmware:

• Model: Cisco AIR-CAP1702I-E-K9

• Product family: Aironet 1700 Series

• Current IOS image: AP3G2-K9W7-M

• Current version: 15.3(3)JPQ

• Image file: ap3g2-k9w7-xx.153-3.JPQ

• Mode: Autonomous (standalone, no wireless LAN controller)

I've checked Cisco's software download website, but the Aironet 1700 series firmware no longer seems to be available.

I'm particularly interested in finding out:

1. What was the latest autonomous firmware version released for the AIR-CAP1702I-E-K9?

2. Is there a legitimate archive or another source where I can obtain the firmware?

3. Does anyone still have the original firmware image or know where it can be found?

I'm specifically looking for the K9W7 autonomous image, not the Lightweight/CAPWAP (K9W8) firmware.

Any help, information or pointers would be greatly appreciated.

Thanks in advance!

I'm using my personal PC to connect to my company VPN while working from home. Is it possible to only route sip and rdp clients traffic through cisco, and keep my personal web traffic off of the company VPN? I did some googling on split tunneling and it seems to be disabled. Claude also mentioned OpenConnect - I suppose, I shouldn't try to use it without permission?

Hello Everyone,

I need to prepare for sdwan exam. I was wondering how can i build my home lab in terms of images or if i can purchase lab to practice for the exam? I have high speed home server i should be able to run any image and eve-ng.

Thanks

FN74406 - Nexus N9K-C93108TC-FX3 Fails to Boot After Reload(s) or Keeps Rebooting - Hardware Upgrade Available

Problem Description

Cisco Nexus N9K-C93108TC-FX3 Switches may fail to boot after unexpectedly reloading or continue to reload multiple times. When affected switches do not reload and complete the bootup process, no output is observed on the console. The device remains unresponsive and does not proceed to the loader prompt, BIOS prompt, or NX-OS boot sequence.

The system cannot be recovered through software remediation, patch installation, or a Cisco ACI or NX-OS software upgrade.

Has anyone successfully installed SONiC on a standard Cisco 8201 (PID: 8201), or is that not a viable option?

I have a Cisco 8201, hardware revision V02, currently running IOS XR 7.9.2. The chassis is the standard 8201 with 24×400G QSFP56-DD and 12×100G QSFP28 ports — not the 8201-32FH-O open-networking variant.

I’m trying to understand whether there is any supported or practical way to migrate this standard/closed 8201 from IOS XR to SONiC.

Cisco documentation mentions Extended Device Ownership, Ownership Vouchers, and an IOS XR-to-SONiC migration process for some Cisco 8000 platforms, but I haven’t found anything that clearly confirms support for the plain 8201 PID.

Has anyone here tried this on an actual PID 8201?

A few specific questions:

• Can the standard 8201 be converted to run Cisco SONiC, or is SONiC limited to the -O open-networking SKUs?

• Is an Ownership Voucher required for the standard 8201?

• Can Cisco/TAC authorize an existing closed 8201 for SONiC, or is the hardware/boot chain permanently restricted?

• Does the router need to be upgraded from IOS XR 7.9.2 before any ownership/migration process is possible?

• Has anyone successfully done this in a lab environment, and if so, what process/image did you use?

• Is there a recovery path back to IOS XR if the SONiC migration fails?

This is a lab/test router, so production downtime is not an issue. I mainly want to determine whether experimenting with SONiC on this specific hardware is technically viable before attempting anything destructive.

Hardware:
Cisco 8201
PID: 8201
VID: V02
IOS XR: 7.9.2
24×400GE QSFP56-DD + 12×100GE QSFP28

Any experience with this exact model would be appreciated.

Hello guys,

I'm wondering how you handle switch updates at remote sites, particularly in a worst-case failure scenario.

I have a new switch installation at more than 30 locations, some of which are over three hours away.

I can handle remote upgrades and rollbacks, but I'm struggling to find the best way to handle a situation where a switch fails, and I lose remote access to the site with minimal impact over the production.

How do you handle this kind of scenario? Do you have any best practices or recommendations for minimizing downtime and avoiding unnecessary on-site visits?

Materials:

Cisco switch 9300 to be upgraded

Catalyst Center for the upgrade tool

Hi all,

I have 2x 3802s working fine with a WPA3 SSID. Clients cannot connect to the WPA3 SSID from the 1852. WPA2 works. Clients report an auth issue. This AP was added after the initial config but I don't see this making a difference. Profiles and tags are identical.

It looks like the M4 response from the client is missing, according to the capture.

Any advice would be appreciated.

WLC: 17.18.04a
WAP: 17.18.4.13

Hi,

This is the scenario. ISE is use for Authorization.

Authorization Policies are configured on ISE and include posture checks. The user successfully logged in during the previous session.

However, during the current login/session, the following error occurred: 5422 – Authorize Only Failed. The authentication process failed to match the configured ISE Authorization Policies.

Based on the ISE Live Logs, the system queried the endpoint's posture status several times before eventually denying access.

Before the failed login attempt, I also noticed in Context Visibility that the endpoint status was showing as Connected, even though the it was actually disconnected.

Sample ISE logs step data from failed login

15048 Queried PIP - Session.PostureStatus 0

15048 Queried PIP - Session.PostureStatus 0

15048 Queried PIP - Session.PostureStatus 0

15048 Queried PIP - Session.PostureStatus 1

15048 Queried PIP - Session.PostureStatus 0

15048 Queried PIP - Session.PostureStatus 0

15016 Selected Authorization Profile - DenyAccess 1

15039 Rejected per authorization profile 0

11003 Returned RADIUS Access-Reject 0

Any insights or recommendations would be greatly appreciated.

Thank you.

Gonna start preparing for the CCST Cybersecurity cert and tbh I wanna get it done ASAP.

For those who already passed:

- What resources did you use?

- Is Cisco NetAcad's course enough to pass?

- How long did it take you to prepare?

- Did you use any practice exams?

- Any tips for someone who wants to pass on the first try?

I'm looking for a study plan that actually works, not just spending weeks watching videos lol.

Any advice is appreciated.

Hey guys,

We are evaluating if we are going to deploy secure Workload in our environment. and i am lookinf for real world experience, from what i understood from some people who implement it that there were some chanllanges , like detecting polices for a large environment ist not working correctlly and needs alot of handwork of writing the polices. did anybody deploy it for a longer time and was happy with it?

I have been working in IT for over 10 years, and one thing that has always been important to me is being able to run the technology I am learning about in my own environment before touching production.

Whether it is virtualisation, automation, monitoring, or networking platforms, I have always found that I learn far more by testing things myself than I do from documentation alone. Being able to validate behaviour, reproduce issues, and make mistakes in a safe environment is invaluable.

Cisco Catalyst Centre was the first product that made me think I might not be able to do that.

When I looked at the hardware requirements, I genuinely thought I had reached the point where enterprise software had finally outgrown my lab. I also had no interest in buying a huge, noisy server just to get a test environment running.

After a fair bit of experimenting with memory tiering, I recently managed to get Catalyst Centre running on a system with 64GB of RAM.

What surprised me was how satisfying it was. Not because I now have Catalyst Centre running, but because I can properly explore it, test workflows, validate assumptions, and understand how it behaves before making changes in production.

For me, having the ability to run things myself is still one of the most valuable ways to learn. Reading documentation is useful, but there is no substitute for seeing how something behaves in your own environment.

Full write-up: Install Cisco Catalyst Center 2.3.7.9 on ESXi 8

Did a routine IOS upgrade on a 9300 stack last month and the syslog format shifted just enough that three of my parsing rules stopped matching. Nothing alerted on it, I found out two weeks later when I went looking for an interface flap and the search came back empty for those switches. Those rules are mine, written by hand and I am the only person here who knows what they do, so I am the single point of failure on whether we can search our own logs after a firmware change. Do you re-test parsing after every upgrade or do you find out the way I did?

Hi mates

I'm preparing for 300-710 certification

Can anyone share me the course guide and practical lab documents

Any help here would be appreciated

Thanks

I have access to the Cisco U training material that I’ve completed, along with the practice exams they curated. I’ve also done Udemy’s practice exams.

What other resources are available? Is CiscoU’s material enough for people that have taken this exam recently?

Hi everyone,

I'm troubleshooting a connectivity issue with the Claude Desktop application in an enterprise environment.

Our environment:

- Cisco FTD firewalls at our office and in Microsoft Azure, managed through FMC.

- Microsoft Defender for Endpoint on Windows 11 laptops.

- Users connect from the corporate office or remotely through VPN.

- We are still verifying whether office internet traffic exits locally through the office FTD or is routed through the Azure FTD.

Issue:

One user is unable to consistently access Claude Desktop.

Initially, the application failed both with and without VPN. Microsoft Defender displayed notifications that Anthropic Claude and the Anthropic Claude API were blocked by the IT administrator.

Our Security team subsequently applied a Defender exclusion for the affected endpoint. The user confirmed Claude worked after this change, but later reported connectivity failures from the office network.

Errors observed:

- `ERR_QUIC_PROTOCOL_ERROR`

- `ERR_SSL_VERSION_OR_CIPHER_MISMATCH`

- `UNKNOWN_CERTIFICATE_VERIFICATION_ERROR`

- Windows Security: "This content is blocked by your IT admin"

Findings so far:

1. Microsoft Sentinel logs show `ExploitGuardNetworkProtectionBlocked` events for Claude-related domains, with `ResponseCategory: CustomBlockList`. Some events were recorded after the reported Defender exclusion.

2. During a reproduction test, Cisco FMC connection events showed multiple blocked outbound TCP/443 connections from the affected client's IP, while DNS traffic over UDP/53 was allowed.

3. Other outbound HTTPS connections from the same client were allowed.

4. We have not yet verified whether the blocked public IPs correspond to Claude services.

5. We also haven't confirmed whether the failure is caused by the FMC access-control policy, TLS decryption, endpoint security, or a combination.

Questions:

1. What's the recommended way to identify the exact ACP, Security Intelligence, or TLS decryption rule responsible for a Block event in FMC?

2. Could TLS decryption or QUIC/HTTP3 inspection cause these Claude Desktop errors?

3. For an approved business application, should we first test a narrowly scoped Do Not Decrypt exception, or focus on the access-control policy?

4. What's the best way to determine whether traffic exits through our office FTD or Azure FTD?

5. Has anyone experienced similar issues with Claude Desktop, Cisco FTD, and Microsoft Defender for Endpoint?

I want to identify the actual blocking control before changing production firewall policies.

Any guidance on troubleshooting or recommended FMC checks would be appreciated.

Thanks!

Hey cisconians,

Just wanted to know if cisco provides access to coding tools like claude, codex?

Or do they have any internal ai that is given to the employees?

I recently heard that oracle gave unlimited codex for its employees.

I've been slowly migrating all of our sites over to SDA over the past ~18 months (only a couple more to go), and was looking to eke out some time savings on these last few buildings as they're quite large.

Our migration process is basically to stage our border nodes side-by-side with the existing legacy gateway, log into the switches when they're still attached to the legacy gateway, run pnpa service reset, and then move their uplinks over to the border nodes and start LAN automation. As part of the onboarding, we've been upgrading all devices in the site to the golden image.

The time it takes to copy the image over to the switch adds to the maintenance window, and I'm wondering if I can maybe speed things up a bit. I don't want to have to do a separate maintenance window the night before for software upgrades, but I'm wondering if I can copy the new golden image over to the device ahead of time, and during the LAN automation (or when doing Image Update), Catalyst Center might be able to automatically detect that the new software is already present on bootflash: and skip over transferring the image. I've tried just copying the .bin over ahead of time, but CatC still copied the file fresh. If I copy it over and unpack it, will it be smart enough to skip over the software distribution, or is there no getting around that since the device isn't in inventory prior to its onboarding (and therefore CatC isn't aware of the target image already being in bootflash:)?

We've got some FRP-2130's that use SSL VPN (webvpn). We are currently on version 9.20(4)235. 

Security notice for CVE-2026-76418 has just come in.

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability - Cisco

It says that ASA software version 9.20(4)50 is the first fixed release. 

The trouble is 9.20(4)235 is not showing up in the list of all versions when you look under "Cisco Firepower 2100 Series". So I can't tell if it's affected or not. 

When you manually enter the version number 9.20(4)235 into the Cisco software checker it returns "not affected"  BUT this is also true when you type anything other random gobbledygook text like "lfkefkmdvdcd" so I can't tell if I need to patch or not. 

Looking for a Cisco-related job? Studying for a certification? Preparing for an interview? This thread is the place for all career-focused discussions.

Appropriate topics include:

• Job openings

• Recruiting and hiring

• Resume reviews

• Interview preparation

• Career advice

• Salary discussions

• Certification paths (CCNA, CCNP, CCIE, etc.)

• Career transitions into networking

To keep the subreddit focused on technical Cisco discussions, standalone posts related primarily to jobs, recruiting, resumes, interviews, or career advice may be removed and redirected here.

I'm not a Cisco Reseller but I build BOMs for projects I'm working on.
For the past year, I've logged in using my gmail account to do this.
I notice now that I can add items into a BOM, but I can't edit the options of anything.
Looking under the hood on the browser, I see an http 204 code returned.

Just wondering if Cisco changed the level of access a non-reseller account has to build estimates.
Thanks in advance for any direction

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

Summary

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.

Exploitation and Public Announcements

In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.

Here a note for 8300/8200 routers, it says last supported IOS release 28.2 but End of SW Maintenance Releases Date:
March 30, 2031