First off Anyconnect works perfectly with 3 laptops my techs are using. They all have version 4.5 Anyconnect client apps & never have any issues. However one of my other users has Anyconnect client version 3.1.12020 & can successfully authenticate (...
Forum Posts
Resolved! ssh access to Layer 3 specific interface
Hi I am just reviewing one of our L3 cisco router and I am seeing there are 4 different VLAN interfaces configured with IP addresses (wireless , Data , Video , Management ) when I do ssh to this switch from my desktop I am able to use any of these ...
I have a UCS environment on 3.1.1K firmware and I see that is TLS 1.2 capable (https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone/ssl-tls-vulnerability-response.pdf) Is there any additional steps to make sure TLS 1.0 is d...
This topic is a chance to discuss more about all you need to know about Cisco FirePOWER security solution. On this session, Marvin Rhoads will be answering all kind of questions about FirePOWER Management Center (FMC), FirePOWER Threat Defense (FTD) ...
hi，all There is a problem in the VPN connection and authentication failure through the AD domain. The current problems are as follows:1, the terminal now dials VPN can pop out the authentication page;2. After the terminal submits the authentication...
Resolved! Recommended Firewall [Security] reading
Hello I was wondering what sort of path and direction to take on learning more about the security aspect of Cisco. I am getting acquainted with the ASA setup and then I see the NGFW (CX IPS?) and then FirePOWER (also part of the NGFW platform??)....
Hi Everyone, Cisco ASA has Ikev2 tunnel to PAlo alto firewall. ASA is receving packets but no transmits show vpn-sessiondb l2l Session Type: LAN-to-LAN Connection : 184.71.194.134Index : 36 IP Addr : 184.71.194.134Protocol : IKEv2 IPsecEncryption...
Hi,I am just curious how does SLA monitor on ASA work. As I understood and tested on GNS3, when configure SLA Monitor you have to specify outgoing interface and by that you are forcing packets (e.g. ICMP) out through specified interface (something th...
Dear Expert, I am deploying a cisco firepower and don't want to use mgt port. I want to use outside interface ip address to the sfr module. Is is possible?? Please suggest. Thanks....
I used "no http server enable" & also removed any configuration related to ASDM. I also removed all static nat statements. When I port scan my ASA public address I still see the ports open hours later. Goodyear# sh run: Saved:: Serial Number:...
Having an issue accessing web server from public internet. I set up some PAT rules & permitted the traffic in my outside acl. When I do a packet tracer it says my ASA is configured to allow access to the server from the outside which I include below....
I have One Firewall cluster (Two Firepower 4120) with port-channel configuration to Cisco Nexus 7K with VPC. There lots of drops on Firepower Port-channel2.86 interface and no drops on Cisco Nexus 7K VPC interface. Here is output of Port-channel2...
What could be the possible reason for a SYN Timeout when an ACL rule is set for that specific traffic? I am thinking that something on the remote side is causing the handshake to not complete. But could there be any other possibilites that would caus...
Hi Everyone, With reference to the Subject mentioned has been chasing by Cisco TAC team also. Is anyone have idea about the issue described below. FTD Box 2120 managing locally by FDM. All are running good, but unexpectedly FDM Management Inter...
Is there a way to NAT port 443 and 80? If so, how does it work if a user goes to http and https? thank you! LN
