Hi Marvin,Just wanted to ask, what other 2FA option is available for AnyConnect Plus (perpetual)?I was trying to configure Azure MFA, I keep on getting failed to generate SAML AuthnRequest, then I saw your post that SAML needs Apex or VPN only licens...
Just an update on this issue, I remove all inside interfaces and re- add it back again the re-deploy the changes. At first it gives me a deployment failed message then there is an option for full deployment. After selecting the full deployment, the V...
Hi Marvin,is it in the NAT exempt inside network section in the wizard? Yes it does allow me, however when I add them, they will not be able to browse any website,. but If I will not add them the VPN client will not be able to reach them.
Hi Marvin, Thank you for your advice, here is the running NAT config:firepower# show running-config natnat (inside,outside) source static NGFW-Remote-Access-VPN|natIpv4Grp NGFW-Remote-Access-VPN|natIpv4Grp destination static NGFW-Remote-Access-VPN|na...