VPN

Hello!I have a client that I have created a very basic AnyConnect profile for, and it is working for our needs, except it changed settings under the DNS tab in the advanced TCP/IP settings for the adapter. It is now set to "append these DNS suffixes"...

We are currently working on enabling users to change their first time login password over CISCO SBL. But heard SAML authentication is not possible in CISCO SBL sometimes before. Is there any progress to allow the users using SAML authentication to ch...

I need to create 2 VPN Profiles. 1) Legacy non-MFA, 2) MFA. Admin machines have both. Users only have only MFA. Need to hide Legacy from Group Profile selection, only accessible from Admin profile. This is to be used if MFA breaks for some reason.Wha...

I am in the process of replacing an ASA5506 with a CSF1220CX, however, is there a firmware update available to bridge us to the new device?  We are looking for ASA5506 with FirePOWER Services Release 9.16.4  or 9.14.4.

I am trying to setup a Site-2-Site VPN between Cisco 8000v running IOS Version 17.15.6 AND Cisco ASA Version 9.20(4)10 using Virtual Tunnel Interface (VTI).  It is very straight forward setup, because I have done this so many times so there is no sur...

I've noticed on a Cisco FMC 7.6.6 that under the VPN-Profile->Access Interfaces there is a option to Disable web portal access.  I can't find anything on this when I search for it since all that comes up are the Flexconfig options the many times this...

Dear all,We are migrating our remote-access VPN configuration from ASA to FTD managed by FMC.Our current ASA configuration uses a Management VPN Tunnel in full-tunnel mode, enabled through the AnyConnect custom attribute described here:Configure a Cu...

We have two FTD 1140n 's(version 7.2.5) in an HA being managed by a FMCv (verion 7.2.5.1) We are using AnyConnect version 4.10.08025 for VPN clients. We setup DUO SSO and it is working fine with one of the two vpn connection profiles we use. We get a...

Cisco Secure ClientからFirepowerへ接続した際、Client Profileが自動的にダウンロードされ、クライアントPCへ新しいClient Profile XMLが配信される認識です。以下についてご教示いただけますでしょうか。Client Profile XMLのファイルサイズは、一般的に数KB程度と考えてよいでしょうか。始業時などに多数のユーザが一斉に接続し、Client Profile XMLのダウンロードが発生した場合、Firepower側のCPUやメモリ、通信...

Hello everyone i've been noticing a log lately, i have vpn between my sites, and i guess problem on ISP, I could be wrong of coursehere the logOct 24 13:17:59.456: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=m...

Hello,Basic question about renewing a public RA VPN certificate from the FMC. Since the Certificate Authority Root cert is allready installed, do I still need to include the CA part everytime we want to enroll a new identity certificate? The picture ...

Hello everyone,I would like to share our Remote Access VPN configuration and an unusual issue we are facing. Perhaps someone has experienced a similar case and can share their experience or troubleshooting steps.Our Configuration:Firewall: Cisco Secu...

Can someone just clear my confusion regarding Phase2 and Phase3 of DMVPN. Apart from the summarization thing I couldn't find any better reason of using Phase3. So what are the actual benefits of using Phase3 instead of Phase2?? And also why was there...

Hi Experts ,I am planning to deploy route based vpn via Mic Azure cloud and configure BGP so that we can access client applications .could someone provide some advise/documentations regarding this deployment as doing this for the first time.From our ...