cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


311
Views
0
Helpful
1
Replies
Highlighted
Beginner

network scan issues

I am having issues with a Nessus scan of my networks. I have multiple site-to-site vpn tunnels with different subnets at each site. When I run a Nessus scan on the remote sites, the tunnels drop and will not reestablish until the firewall is rebooted on my end. ASA-5510, OS v8.2.5. Any ideas?

1 REPLY 1
Beginner

network scan issues

You should first check your syslogs to see why the traffic is being denied. Once in the failed state, you can also check the packet-tracer output for some VPN traffic to see why the ASA isn't forwarding it.

At the time of the failure, does either endpoint have the appropriate isakmp or ipsec sa's built?

Thanks,

Brendan