We have an IKEv2 L2L VPN with one of our customers which has three subnets in the encryption domain.  Today, one of the subnets stopped passing traffic.  Upon examination we found that the Phase 2 child sa for that subnet was not establishing, even w...

We have multiple route based tunnels from a single ASA to Velocoud devices.  All Velo tunnels are exhibiting strange behavior where the IPSec traffic selector gets reset to two /32s, the local and remote peer IP addresses.  I have to go in and remove...

Additional Info: Found out this is a Velocloud installation without the Premium License. We need to establish a VPN connection to a customer who is using a VMWare SDWan solution.  They do not have the license to specifically select the Cisco ASA as t...

I "inherited" some older SF302 8 port switches that need to be upgraded.  However, the 1.3.5 firmware and boot code seem to have been pulled from the downloads section.  I see 1.1 and 1.4, but no 1.3.5.  The 1.4 docs say to upgrade the bootloader whi...

Does the ASA have a mechanism by which we can monitor a VPN tunnel using an SLA/Track to a private IP on the remote side and if the SLA fails, re-reroute traffic via a second VPN configured to a different peer?  A partner has this type of configurati...