Advantages of Using Secure Connect in Cisco Jabber Version 9.0

Hello,
About a month ago we deployed Jabber for iPhone. For VPN we used Cisco AnyConnect,certificate authentication and VPN on demand. We used our MDM to deploy the certificates and AnyConnect configuration. So far everything is working as designed. Now with the release of version 9, Secure Connect is an option and I was wondering what are the advantages of using Secure Connect?
Thanks

Hi Manrico,
Are the all the systems using the same firewall policy. It could be one of the rules configured in the SEP client. What build version are you running? Are all systems using the same version of VPN client? As Parminder stated, you should disable the firewall and check behavior.
If the firewall is found to be the cause, you can troubleshoot by adding an "Allow All" rule to the top of the SEP policy. Moving the rule down one line at a time until the problem occurs again. Once that happens, you will have narrowed it down to the rule just above.
Let us know how it goes for you.
Best,
Thomas

Similar Messages

Are there any advantages of using Secure Empty Trash over regular Empty Trash?

Are there any advantages of using Secure Empty Trash over regular Empty Trash?

If you are going to run around with sensitive files on your file system, you might be better off using a whole disk encryption so that every file is encrypted, any deleted file contains encrypted contents. As long a no one can access your files using your encrytpion keys, all your data is secure.
Also secure delete is not really going to do much on a Solid State Drive, and again whole disk encryption would be a better choice.
For a moderate amount of data, secure erase does not take too much time. But if you have a ton of file and/or a few really large files to erase, secure erase can take a long time to complete as it is doing multiple pass to write and overwrite the file's storage with patterns of data that make it extremely difficult to recover the original data. That takes time.
Finally, if you have been updating a document, previous editions may have been given over to free storage as new versions are written, such that when you decide to erase the file you may only be doing secure erase on the most recent copy.

How to use secure connection parameter in file adapter

Hi all,
I have scenario like FIle to file using ftp protocal over secure connection(FTPS).
i have some doubts like for doing this interface wat infromation i required from my client.
iam able see the option FTPS(FTP USE SSL\TLS) for control connection & control and data conncetions.
if i check the use X.509 certificate for the client authentication
kestore (in the list i can see the some entrys for private keys )
X.509 certificate & private key(i can also see some entries for private key here )
my question am i use the this existing private key & certificates?
if yes which keys & certificates i have to use.
if no wat information i need like private key & certicates from client & how we installed those in the keystore providing by visual admin.
For appearing those entrys in value list of the above parameters key store & X.509 certificate & private key.
please let me know any basis activity involved over here other than keystore deployemnet.
please correct me if any thing wrongly mentioned.
Thanks in Advance.
Edited by: katakoti on Jul 7, 2011 7:36 AM

HI Reddy ,
i already read that blog it nice blog. Few my doubts clarfied while reading the that blog.
my quetion is like weathe can we use "service_ssl" key sotre entry for any client FTP server for sending the encrypted files?.
i mean those entries in the keystore & X.509 Certificate and Private Key stanrd or client(sender or reciver) FTP specific
what deatils we require to do this scenario from client end & security team or basis team(firewall configuration like that).

Trouble using secure connection

I'm having trouble accessing the iTunes store using a secure connection. I've tried everything I can possibly think of - disabling my firewall, renewing my IP address, etc. Apple and HP support don't seem to know how to help. I would greatly appreciate any advice anyone here can offer. Here's my network diagnostic log.
Microsoft Windows XP Professional Service Pack 2 (Build 2600)
Hewlett-Packard HP Pavilion dv2000 (RG404UA#ABA)
iTunes 7.0.2.16
Current user is an administrator.
Network Adapter Information
Adapter Name: {0B1AABA9-25E5-4308-9113-6F182EE30272}
Description: Broadcom 802.11b/g WLAN
IP Address: 0.0.0.0
Subnet Mask: 0.0.0.0
Default Gateway:
DHCP Enabled: Yes
DHCP Server: 255.255.255.255
Lease Obtained: Thu Jan 11 19:05:50 2007
Lease Expires: Thu Jan 11 20:05:50 2007
DNS Servers:
Adapter Name: {B6A6E76E-7355-4E9F-9357-0664380A25C6}
Description: NVIDIA nForce Networking Controller
IP Address: 169.254.43.237
Subnet Mask: 255.255.0.0
Default Gateway:
DHCP Enabled: Yes
DHCP Server: 255.255.255.255
Lease Obtained: Thu Jan 25 17:09:02 2007
Lease Expires: Mon Jan 18 21:14:07 2038
DNS Servers:
Adapter Name: {25E8B897-A7F7-42D2-BC97-C56F614434D2}
Description: WAN (PPP/SLIP) Interface
IP Address: 70.232.112.71
Subnet Mask: 255.255.255.255
Default Gateway: 70.232.112.71
DHCP Enabled: No
DNS Servers: 68.94.156.1
68.94.157.1
Network Connection Information
Active Connection: sbc
Connected: Yes
Online: Yes
Using Modem: Yes
Using LAN: No
Using Proxy: No
SSL 3.0 Support: Enabled
TLS 1.0 Support: Enabled
Firewall Information
Windows Firewall is off.
Connection attempt to Apple web site was successful.
Connection attempt to iTunes Store was successful.
Secure connection attempt to iTunes Store was unsuccessful.
The network connection timed out.
HP Windows XP Pro

I'm having trouble accessing the iTunes store using a secure connection. I've tried everything I can possibly think of - disabling my firewall, renewing my IP address, etc. Apple and HP support don't seem to know how to help. I would greatly appreciate any advice anyone here can offer. Here's my network diagnostic log.
Microsoft Windows XP Professional Service Pack 2 (Build 2600)
Hewlett-Packard HP Pavilion dv2000 (RG404UA#ABA)
iTunes 7.0.2.16
Current user is an administrator.
Network Adapter Information
Adapter Name: {0B1AABA9-25E5-4308-9113-6F182EE30272}
Description: Broadcom 802.11b/g WLAN
IP Address: 0.0.0.0
Subnet Mask: 0.0.0.0
Default Gateway:
DHCP Enabled: Yes
DHCP Server: 255.255.255.255
Lease Obtained: Thu Jan 11 19:05:50 2007
Lease Expires: Thu Jan 11 20:05:50 2007
DNS Servers:
Adapter Name: {B6A6E76E-7355-4E9F-9357-0664380A25C6}
Description: NVIDIA nForce Networking Controller
IP Address: 169.254.43.237
Subnet Mask: 255.255.0.0
Default Gateway:
DHCP Enabled: Yes
DHCP Server: 255.255.255.255
Lease Obtained: Thu Jan 25 17:09:02 2007
Lease Expires: Mon Jan 18 21:14:07 2038
DNS Servers:
Adapter Name: {25E8B897-A7F7-42D2-BC97-C56F614434D2}
Description: WAN (PPP/SLIP) Interface
IP Address: 70.232.112.71
Subnet Mask: 255.255.255.255
Default Gateway: 70.232.112.71
DHCP Enabled: No
DNS Servers: 68.94.156.1
68.94.157.1
Network Connection Information
Active Connection: sbc
Connected: Yes
Online: Yes
Using Modem: Yes
Using LAN: No
Using Proxy: No
SSL 3.0 Support: Enabled
TLS 1.0 Support: Enabled
Firewall Information
Windows Firewall is off.
Connection attempt to Apple web site was successful.
Connection attempt to iTunes Store was successful.
Secure connection attempt to iTunes Store was unsuccessful.
The network connection timed out.
HP Windows XP Pro

In Firefox version 37.0 getting Secure Connection Failed config parameter version.fallback-limit set to 3. Does this support TLS 1.0 .

In FF 37.0 getting secure connection failed connecting to a website. Works fine in previous version. Config parameter version.fallback-limit default setting is 3. In previous version the default setting was 1. Does the setting version.fallback-limit to 3 mean only TLS1.2 is supported. Any help is appreciated.
Secure Connection Failed
The connection to xxxx.xxx.com was interrupted while the page was loading.
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.
Thx,

The website may try to fallback to TLS 1.0 in a way that is no longer allowed in current releases or may be using a deprecated cipher suite.
You can open the <b>about:config</b> page via the location/address bar and use its search bar to locate this pref:
*security.tls.insecure_fallback_hosts
You can double-click the line to modify the pref and add the domain (full domain) to this pref.
If there are already websites (domains) in this list then add a comma and the new domain (no spaces).
You should only see domains separated by a comma in the value column.
See also:
*https://developer.mozilla.org/en-US/Firefox/Releases/36/Site_Compatibility#Security
*https://developer.mozilla.org/en-US/Firefox/Releases/37/Site_Compatibility#Security

File upload and download using secure connection ??

hi,
i have to transfer file from clinet machine to server.
so, actually my need is, client submit form , then that file will go to url like "www.abc.com/ " server receives and store data in database and after that sends new file to that client
but all this transfer must be on secure way.
i have to done that in java only (not in jsp) and this concepts are new for me
so, how can i transfer that file ?
pls, help me......

You can also try the Jenkov HTTP Multipart File Upload. It's a servlet filter that is easy to add to your web-project. After adding it, you can access both request parameters and the uploaded files easily. It's more transparent than Apache Commons File Upload. There is sufficient documentation to get you started, and there is a forum if you have any questions.
Jenkov HTTP Multipart File Upload is available under the Apache license, meaning its free to use.

Detecting user session expiry in secure connection

I have implemented Frank's method of detecting expired session (http://thepeninsulasedge.com/frank_nimphius/2007/08/22/adf-faces-detecting-and-handling-user-session-expiry/)-
basicaly we call session expired when requested session is not equal to current web session:
String requestedSession =
((HttpServletRequest)request).getRequestedSessionId();
String currentWebSession =
((HttpServletRequest)request).getSession().getId();
boolean sessionOk =
currentWebSession.equalsIgnoreCase(requestedSession);
It works perfectly well when I am launching application in OC4J, but it doesnt if I use JBoss with secure connection and session id in cookie- requestedSession and requestedSession is always the same
Is there a way to detect session expiry using secure connection?

Thank You for the answer Frank.
unfortunately I cannot see full view of how this proposal differ from what I am doing..
Can You please be more specific...
As I understand, I am doing exactly the same with:
String requestedSession =
((HttpServletRequest)request).getRequestedSessionId();
String currentWebSession =
((HttpServletRequest)request).getSession().getId();
or you mean to save currentWebSession somewhere else?

Cisco Call Connect for Cisco 2.0 and E52

Hello,
We have a lot of Eserie, old models, using Call Connect for Cisco 1.1 registered to Cisco Communications Manager 6.1. They are well registered in SCCP protocol to the CallManager, and we use the phone model type 7970 to register them.
Now, we received new model E52 which requires Call Connect for Cisco 2.0 release. But we experienced issues registering them into the CallManager 6.1 and phone model type 7970. Apparently there is a model mismatch.
I would like to know if everyone found the right model type to register them without installing the COP addon adding the Nokia CC model.
Best regards,
Yorick

Hi!
Just for curiosity; why wouldn´t you install COP addon?

Cisco Jabber 9.2.1 connect LDAP fail

Hi all,
I am using CUCM 9.1 and CUP 9.1
Here is my UC service settings
Product type          : Enhanced Directory
Port                    : 389
Protocol          : TCP
Connecction Type: Ldap
Serivce profile has been created and assigned to the end-user
If I use CUPC8.5 and 8.6, it can connect to LDAP successfully
However, if using Cisco Jabber 9.2.1 (window), it cannot connect to AD
in "Show Connection service", it shows
Status : Unknown
Reason : Unknown
Is there any missing configuration for Jabber 9.2.1
Thanks in advance
Sam

Have you configured the jabber-config.xml file?? That configuration you have is not for Jabber, if you haven't, review the configuration guide for details.
Sent from Cisco Technical Support iPad App

Cisco Jabber for Windows in Extend and Connect mode and making outbound calls

Hi guys,
I've set up Cisco Jabber for Windows to use Extend and Connect to control a remote PBX endpoint. I've configured the required CTI-RD device, remote destinations, associated the users to the line and added the devices to end-user controlled device. The extend and connect part is working flawlessly without any issues. I'm able to receive inbound calls on the remote PBX endpoint and control the call (hold, resume, transfer etc.) using the Jabber call window that pops up.
However, I'm unable to make any outbound calls via the Jabber client when in extend and Connect mode. Reading the Extend and Connect guide, I need to configure Dial Via Office (DVO) Reverse. So when the user initiates a Dial-Via-Office reverse call, CUCM calls and connect to the Extend and Connect device (CTI-RD). CUCM then calls and connects to the number the user dialled and finally connects the two call legs.
After attempting to configure DVO-R for Jabber for Windows in Extend and Connect mode following the CUCM feature services guide, i'm unable to get any outbound calls working. From RTMT, i am receiving the following Termination Cause Code: (27) Destination out of order. What i also notice is that there is no calling number for that trace either. I would've thought that the calling party would've been the Enterprise Feature Access (EFA) number.
Has anyone got this working or can provide some guidance?
Thanks.

Hi guys,
I've set up Cisco Jabber for Windows to use Extend and Connect to control a remote PBX endpoint. I've configured the required CTI-RD device, remote destinations, associated the users to the line and added the devices to end-user controlled device. The extend and connect part is working flawlessly without any issues. I'm able to receive inbound calls on the remote PBX endpoint and control the call (hold, resume, transfer etc.) using the Jabber call window that pops up.
However, I'm unable to make any outbound calls via the Jabber client when in extend and Connect mode. Reading the Extend and Connect guide, I need to configure Dial Via Office (DVO) Reverse. So when the user initiates a Dial-Via-Office reverse call, CUCM calls and connect to the Extend and Connect device (CTI-RD). CUCM then calls and connects to the number the user dialled and finally connects the two call legs.
After attempting to configure DVO-R for Jabber for Windows in Extend and Connect mode following the CUCM feature services guide, i'm unable to get any outbound calls working. From RTMT, i am receiving the following Termination Cause Code: (27) Destination out of order. What i also notice is that there is no calling number for that trace either. I would've thought that the calling party would've been the Enterprise Feature Access (EFA) number.
Has anyone got this working or can provide some guidance?
Thanks.

How can I use MS Windows 7 Task Scheduler to start Cisco Jabber?

Hello Jabber community,
I have a need to automatically start Cisco Jabber client on my Desktop and have it connect to a SIP address of our CTX, then followed by the running of a recording application. The problem is I don't know the Jabber CLI to use to start it up and connect to the SIP address.
Can anyone please advise how to do this?
cheers,
-guy

Hi Guy,
I think you should probably open up a TAC case and get the TAC engineer to walk you through how to deploy Jabber.
When you say "SIP url", I presume you mean the CUPS/Webex server address. This address can be added to Jabber in 3 ways:
1. Transforming the MSI using the Orca tool.
2. Using msi install parameters
3. Entering the value when you run Jabber first.
Using a bat file in conjunction with task scheduler will not work and is not a supported way of doing. The 3 other options are also much easier to implement.
Thanks,
- Colin

Using cisco jabber in a contact center environment

Hi All,
We have recently thought about using Cisco Jabber 10.5 in our environment for all contact center users follwoing are the versions we use
CAD - 8.5
UCCE - 8.5.3
CUCM - 8.6.2
We do not have a presence server but are planning on the same as we require it for jabber. Like to know if there would be any issues using CAD and CSD when we use jabber as a soft client and is there a requirement for CIPC or hardphones to be used with jabber.
Please help me out

This might help you out.
"Certain advanced use cases, such as those that involve posture assessment, profiling, and web authentication, are not consistently available with non-Cisco devices or may provide limited functionality, and are therefore not supported with non-Cisco devices. In addition, certain other advanced functions like central web authentication (CWA), Change of Authorization (CoA), Security Group Access, and downloadable ACLs, are only supported on Cisco devices.""
http://www.cisco.com/en/US/docs/security/ise/1.1.1/compatibility/ise_sdt.html

Unable to select 'Use Phone for audio calls' on Cisco Jabber Client 9.6 for Windows

Hi,
I have recently deployed Cisco Presence Server and integrated with Call Manager 9.1.2. I have successfully deplyed 6700 users on IM & Presence. Some of the users requested for Cisco Jabber with phone control.
I have added CFS client on the Call Manager and associated it with the same extension numbers from their desk phones. I am currently able to make audio and video calls for these specific users. I am currently using Cisco Jabber Client 9.6 for windows. I have users both daisy chained to their desk phones and who are not. Can you please confirm if it does make any difference.
Problem Faced -
I am not able to use to option use phone for audio calls. The phone comes down with a cross sign on it. At the same time Cisco Jabber by default uses the client and it works as expected.
Can you please let me know if any of you guys have faced a similar issue.
Please let me know if you need any information regading the configuration used.
Looking forward for your valuable comments.
Thank you.
Regards,
Joseph Chirayath.

Hi Will,
I am attaching the screen shot for the END USER on CUCM 9.X that has been configured on Cisco Jabber.
Please do let me know if you need any further information.
Thank you.

I have an Airport Express that I am trying to use connected by ethernet to my iMac G4 running Mac OS 10.4.11. I need to update the Airport software in order to use security option WPA2 Personal. I currently have Airport software v. 5.6.1.

I have an Airport Express that I am trying to use connected by ethernet to my iMac G4 running Mac OS 10.4.11. I need to update the Airport Express softwart in order to use security option WPA2 Personal to connect to the internet through my Airport Extreme. I currently have Airport Express software version 5.6.1. How can I update this software? (I can connect directly to my Airport Extreme by ethernet and download the update that way). Is a later version of A E software available for download anywhere? Any suggestions would be greatly appreciated.
Thanks.

Download and install AirPort Utility 5.4.2 for Mac OS X 10.4.11 "Tiger" here:
AirPort Utility 5.4.2
Once installed, launch AirPort Utility. It will tell you if a firmware upgrade is available for your Express.

I'm on an iphone that is no longer connected to the network, using it as an ipod touch. I can't download apps, however... it tells me that there is no secure connection and to update the date and the time. I'm not on a public network though...

I am using an old iPhone 3 as an iPod touch. It's no longer connected to a network. I am trying to download apps while using a secure internet connection, however, it's not allowing me to do so. The message is gives is: "Cannot Connect to the Store" A secure connection could not be established. Please check your date and time settings." I'm confused as to how I can fix this. The time seems to be correct, and I'm not using public internet.... Any suggestions??

The warranty entitles you to complimentary phone support for the first 90 days of ownership.

Advantages of Using Secure Connect in Cisco Jabber Version 9.0

Similar Messages

Maybe you are looking for