Please see attached. ... View more

Can you post running configuration? ... View more

I just tried that on my FPR 2110 and it does work. What's the extact IPv4 address you are entering? ... View more

It's very unclear of what you want, are you looking to forward these ports where people can access resources on these ports outside your office? ... View more

I tried it on mine and it worked fine but I mostly configure it via CLI. Why don't you do this: - Login to ASA with ASD - Check "preview commands before sending" from preferences and save - Create a tunnel and hit apply, at this point you will see all the commands. - Copy and paste the commands in notepad, remove that group policy thing (It's of no use) - SSH into the ASA - Paste all the commands - write mem - copy running-config startup-config Let us know how it goes. ... View more

Can you check if this helps you out? It's more of a Windows issue than Cisco's. I had same issue with another program and this helped me: https://www.easeus.com/todo-backup-resource/this-app-cant-run-on-your-pc-in-windows-10.html ... View more

You can use the latest ASDM available for your  5520 i.e. asdm-781-150.bin. Matter of fact, I have ASA 5510 with  asa917-32-k8 and asdm-792-152.bin running together without any issues. ... View more

Here is my running-config   ip local pool vpnpool 10.100.21.50-10.100.21.200 mask 255.255.255.0 ! interface Ethernet0/0 nameif outside security-level 0 ip address XXXXXXX standby XXXXXXX ! interface Ethernet0/1 nameif inside security-level 100 ip address 10.100.20.1 255.255.255.0 ! interface Ethernet0/2 shutdown no nameif no security-level no ip address ! interface Ethernet0/3 shutdown no nameif no security-level no ip address ! interface Management0/0 management-only shutdown no nameif no security-level no ip address     boot system disk0:/asa917-13-k8.bin boot system disk0:/asa902-k8.bin ftp mode passive dns domain-lookup outside dns server-group DefaultDNS name-server 4.2.2.1 name-server 8.8.8.8 name-server 4.2.2.2 name-server 8.8.4.4 same-security-traffic permit inter-interface same-security-traffic permit intra-interface     object network obj_any subnet 0.0.0.0 0.0.0.0 object network 10.100.21.0-24 subnet 10.100.21.0 255.255.255.0 description Anyconnect VPN pool     access-list SPLIt-ACL standard permit 10.100.20.0 255.255.255.0 access-list SPLIt-ACL standard permit 10.100.21.0 255.255.255.0 nat (inside,outside) source static 10.100.20.0-24 10.100.20.0-24 destination static 10.100.21.0-24 10.100.21.0-24 object network obj_any nat (inside,outside) dynamic interface access-group outside_access_in in interface outside route outside 0.0.0.0 0.0.0.0 XXXXXXX 1     crypto ca trustpoint policy crl configure crypto ca trustpoint ASDM_TrustPoint1 enrollment terminal crl configure crypto ca trustpoint ASDM_TrustPoint0 enrollment self fqdn CEH-CLE-ASA01 subject-name CN=CEH-CLE-ASA01 crl configure crypto ca trustpool policy crypto ca certificate chain ASDM_TrustPoint0 ssl trust-point ASDM_TrustPoint0 outside webvpn enable outside no anyconnect-essentials anyconnect image disk0:/anyconnect-win-3.1.14018-k9.pkg 1 regex "Windows NT" anyconnect image disk0:/anyconnect-macosx-i386-3.1.14018-k9.pkg 2 regex "Intel Mac OS X" anyconnect enable tunnel-group-list enable cache   disable error-recovery disable ssl-server-check warn-on-failure group-policy clientgroup internal group-policy clientgroup attributes vpn-tunnel-protocol ssl-client split-tunnel-policy tunnelspecified split-tunnel-network-list value SPLIt-ACL     class-map dynamic-filter match port udp eq domain class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters   message-length maximum client auto   message-length maximum 512 policy-map global_policy class inspection_default   inspect ftp   inspect h323 h225   inspect h323 ras   inspect rsh   inspect rtsp   inspect esmtp   inspect sqlnet   inspect skinny    inspect sunrpc   inspect xdmcp   inspect sip    inspect netbios   inspect tftp   inspect ip-options   inspect dns dynamic-filter-snoop class class-default   user-statistics accounting ! service-policy global_policy global   Hope this helps ... View more

I added running-config specific to webvpn ... View more

It's allowed\, please check running-config and let me know if any issues. ... View more

Is the VPNPool part of the network assigned to the Inside Interface ? No, it's a totally different subnet as you generally create in Anyconnect VPN pools I haven't created any rule as such If the tunneling and routing in place it should work but seeing only the partial configuration and not knowing more about the topology - I cant say for sure yet. Please check the running config, hope it helps. ... View more

Here is my running-config ip local pool vpnpool 10.100.21.50-10.100.21.200 mask 255.255.255.0 ! interface Ethernet0/0 nameif outside security-level 0 ip address XXXXXXX standby XXXXXXX ! interface Ethernet0/1 nameif inside security-level 100 ip address 10.100.20.1 255.255.255.0 ! interface Ethernet0/2 shutdown no nameif no security-level no ip address ! interface Ethernet0/3 shutdown no nameif no security-level no ip address ! interface Management0/0 management-only shutdown no nameif no security-level no ip address boot system disk0:/asa917-13-k8.bin boot system disk0:/asa902-k8.bin ftp mode passive dns domain-lookup outside dns server-group DefaultDNS name-server 4.2.2.1 name-server 8.8.8.8 name-server 4.2.2.2 name-server 8.8.4.4 same-security-traffic permit inter-interface same-security-traffic permit intra-interface object network obj_any subnet 0.0.0.0 0.0.0.0 object network 10.100.21.0-24 subnet 10.100.21.0 255.255.255.0 description Anyconnect VPN pool access-list SPLIt-ACL standard permit 10.100.20.0 255.255.255.0 access-list SPLIt-ACL standard permit 10.100.21.0 255.255.255.0 nat (inside,outside) source static 10.100.20.0-24 10.100.20.0-24 destination static 10.100.21.0-24 10.100.21.0-24 object network obj_any nat (inside,outside) dynamic interface access-group outside_access_in in interface outside route outside 0.0.0.0 0.0.0.0 XXXXXXX 1 crypto ca trustpoint policy crl configure crypto ca trustpoint ASDM_TrustPoint1 enrollment terminal crl configure crypto ca trustpoint ASDM_TrustPoint0 enrollment self fqdn CEH-CLE-ASA01 subject-name CN=CEH-CLE-ASA01 crl configure crypto ca trustpool policy crypto ca certificate chain ASDM_TrustPoint0 ssl trust-point ASDM_TrustPoint0 outside webvpn enable outside no anyconnect-essentials anyconnect image disk0:/anyconnect-win-3.1.14018-k9.pkg 1 regex "Windows NT" anyconnect image disk0:/anyconnect-macosx-i386-3.1.14018-k9.pkg 2 regex "Intel Mac OS X" anyconnect enable tunnel-group-list enable cache   disable error-recovery disable ssl-server-check warn-on-failure group-policy clientgroup internal group-policy clientgroup attributes vpn-tunnel-protocol ssl-client split-tunnel-policy tunnelspecified split-tunnel-network-list value SPLIt-ACL class-map dynamic-filter match port udp eq domain class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters   message-length maximum client auto   message-length maximum 512 policy-map global_policy class inspection_default   inspect ftp   inspect h323 h225   inspect h323 ras   inspect rsh   inspect rtsp   inspect esmtp   inspect sqlnet   inspect skinny    inspect sunrpc   inspect xdmcp   inspect sip    inspect netbios   inspect tftp   inspect ip-options   inspect dns dynamic-filter-snoop class class-default   user-statistics accounting ! service-policy global_policy global Hope this helps ... View more

Thank you for the quick reply but I would really appreciate if you could just guide me through this. Webvpn is pretty new to me and I do not wanna mess the production FW. ... View more