Hi all,not sure this is the right place to raise my question..if not..beg you pardon.problem: I have to interconnect 2 datacenter with 2 links 10gb each so...10+10physical connection is DWDM (dark fiber) and each datacenter has is own nexus93108 (as ...
Hi All,as per subject i have a problem with hairpinning and webvpn my gears:HQ with asa5525x 9.6.4.10cisco anyconnect 4.5.03040 for client to site remote access design:remote users connect FROM outside interface using ssl webvpn anyconnect client.Th...
Hi all,i'm facing a weird problem with asa5520x (Version 9.6(4)10 ) in TRANSPARENT mode and Netlow collector (manage engine ).I had to move the configuration of my transparent firewall from vlan mode to subinterface with portchannel.Since then i r...
Hi all,
as far as you know, it could be possible to have two factor authentication in acs 5.x?
What i want to achieve is:
1) if a VPN user try joint the network, a user lookup needs to be performed against a specific Group in AD, but the password ne...
Hi,
is it possible to authenticate an user using Active Directory, internal database and OTP server for password?
what i want to achieve is:
- if the VPN user belongs to a specific group of our AD....perform the user lookup on that Group and if user...
i've just realized that i do not really need to populate the vpnfilter with the routes included in the routing table ( my mistake )what need to be done is to configure the vpnfilters exactly as current inside to outside acl's are configured right now...
in several ways. l2 segregationL3 ACL applied on inside asa interface for internet access + proxy for web trafficL3 ACL applied on inside asa interface for internet access using other protocolsAD "logon to" on each user to provide access from specifi...
sure, but i guess that unique vpn filter may contain several ACE ( destinations ) within the filter .....right?...so is there a way to fullfill the vpnfiler with the entries collected by the device routing table...automatically? if not, i will do wi...
btw, i think i'm gonna pursue the vpnfilter suggestion...even if....a new problem arise.for several reasons my internal routing table is composed by approx 2000 entries ( some contractors inject several global network to my routing table and is not p...
Hi Marvin,thx, this is really a good start point that will adress the big security hole i have at the moment...but....what about if i want to be more granular?i elaborate:yes...i perform full tunnelling ( no Split T )...and if i apply the vpnfilter.....
