Dears, I hope you're doing great. I need some assistance with an issue. I have a Cisco 2120 NGFW appliance running FTD. Remote Access VPN is currently active on port 443 and integrated with Azure via SSO; however, when I change the port (e.g., to 54...
Forum Posts
Hello,I'm trying to tune our Secure Client Profile and there's a question:I've set Automatic VPN Policy with Trusted DNS Domain/Servers, if I additional activate Always On, then the Client wants to connect, even if the Client is connected in a Truste...
We have Cisco AnyConnect VPN configured for our Enterprise.We have 4 Endpoints behind an Azure Traffic Manager as Load-Balancer. These End-points are hosted on-premise.The Traffic Manager is intermittently but frequently showing the endpoints as unhe...
Dear all,We are migrating our remote-access VPN configuration from ASA to FTD managed by FMC.Our current ASA configuration uses a Management VPN Tunnel in full-tunnel mode, enabled through the AnyConnect custom attribute described here:Configure a Cu...
Just an FYI as this one was hard to find. All of our developers on MacOS Tahoe and the latest version of the Cisco Secure Client have the issue.### Root Cause Analysis of Spindumps 1. **Process Identification**:* The affected process is `cscan`, loc...
FTD at the hub site with dual ISP needs VPN to multiple spoke sites that have single ISPs.FDM doesn't let me to create a second route-based to the same remote gateway. I understand this is a limitation with FDM. So I have to make all tunnels policy-b...
Hi Community,I am trying to setup two route-based ipsec tunnels between cisco 3105 (Site A) and 2130 FTD (Site B) firewalls. The firewalls are behind a NAT device and the NAT device in turn is connected to two ISPs. The NAT device is responsible for ...
We are in process of upgrade cisco secure client and compliance module on LAN Endpoints. We are looking to upgrade 300 pilot LAN endpoints before we rollout on all endpoints in environment.We created new Client Provisioning Policy with specific Endpo...
How to assure CISCO Secure Client VPN will work perfectly over LINUX OS, Ubuntu or Mint distributions, because after installation sometimes there is no connection to corporate servers.
I'm pretty much lost. I keep bothering our IT with this problem, but they were unable to solve it. I'm using cisco anyconnect to connect to our VPN. Often -- especially after just having the VPN connection established -- the connecting breaks. anycon...
Recently an interviewer asked me a question: What is the point of using Geolocation filtering if that could be bypassed by a vpn. And when I think about it he was right, we use vpn so that we could access content which can't be access in our region. ...
I've been using CISCO Secure Client for years on my MacBoo Pro with MacOS Ventura 13.7.8, but recently, after the connection, CISCO started mandatory upgrade to version 5.1.20.333. The download and install is completed but after that, CISCO opens lik...
Resolved! IKEv2 issue on router
Hello everyone configured on my router after days i see log, 393563: Sep 10 06:44:22.375: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=a.b.c.d, prot=50, spi=0x8280(33408), srcaddr=e,f,g,h, input interface=Tunne...
Hello community,Starting from 5.1.17 version, secure client responds with all-zeroes NT-response during IKEv2 EAP-MSCHAP authentication, which causes authentication failure. User and peer-challenge are good though:(snippet from freeradius log)(19) ms...
For our IPsec connection, our site uses policy-based IPsec, while the remote site uses route-based IPsec.When I changed our site from policy-based to route-based, the router’s tunnel interface went up and the connection was encrypted, but the count o...
