About scootertgm

scootertgm · 02-22-2010

I currently use a VPN concentrator for a VPN to a "Restricted" area on our network.The network allowed list prevents users from speaking to two specific IP's. We don't allow them to talk to our ISA servers will connected to the VPN. However, a user...

scootertgm · 07-30-2009

I just upgrade our MARS to 6.03 and and I am getting this message from our ASA. I was simply going to place in a drop rule, but there is no IP address to use for the rule. The IP address are all NA. Drop Rate Exceeded N/A 0 N/A N/A N/A Ca...

scootertgm · 07-20-2009

I have a 6509 currently running in Hybrid mode that I am researching to upgrade to native IOS.On a regular switch, I can delete the old IOS image to make room in the flash for the new IOS image.During the process I need to have the new IOS up on the ...

scootertgm · 01-12-2009

We use a 3000 series concentrator to all certain users access to a restricted part of our network.It has been setup to allow PC's to also communicate with our private addresses (a class B).I need to deny access to a couple of IP's internally (within ...

scootertgm · 12-08-2008

I had a mis-configured drop rule that logged to the DB.Is it possible to go back and review the event in the DB to get the info from the attack?

scootertgm · 07-26-2010

I have a ASA 5510 and I am trying to get it setup to use a windows 2003 server for radius authentication. There is no active directory on this server. I would like the server to return the group the user is a member of and have that match up to a g...

scootertgm · 07-20-2010

I am setting up a ASA 5510 that will have users connection via IPSec client to access a restricted area. I need to allow then to split tunnel to a few local resources.I have tried to use group policy, but the ACL's for the option of exclude the f...

scootertgm · 04-07-2010

When I was talking to a cisco rep, I know the license allowed full communication between the three vlans. I thought that may have been what you were asking.

scootertgm · 04-07-2010

I believe you need the security plus license for it to open things up.http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.htmlScroll to the bottom to see the note on the vlans.

scootertgm · 04-07-2010

I thought about this last night. The denied error is to IP1. Are you telling the VPN client to connect to the outside interface of the ASA or are you trying to connect the VPN to IP1?When you run the wizard, it will setup the VPN to allow it to con...

Member Since	‎05-14-2007 01:41 PM
Date Last Visited	‎07-04-2018 12:05 AM
Posts	66

User Statistics

User Activity

VPN Concentrator allowing traffic to an IP not in the allowed network list

Drop Rate Exceeded

Cat 6500 upgrade

VPN concentrator restrictions

Can you read a dropped event?

Re: ASK THE EXPERTS - TROUBLESHOOTING ASA, PIX, and FWSM

Re: ASK THE EXPERTS - TROUBLESHOOTING ASA, PIX, and FWSM

Re: ASA 5505 - 2.5 VLAN limit

Re: ASA 5505 - 2.5 VLAN limit

Re: How do I setup ASA5520 VPN for Network (Client) Access?