About Max-Morten Conrad

Max-Morten Conrad · 02-03-2021

Hi guys, a strange issue I am observing right now on an ASA5515-X with ASA-OS 9.8(4)29: - DTLS is disabled in group-policy via 'group-policy POLICYNAME attributes; webvpn; anyconnect ssl dtls none'- despite this some users (that have said group-polic...

Max-Morten Conrad · 12-14-2020

Hello everyone, we are currently facing issues updating one of our CSR1000V from IOS XE 16.03 Denali to 16.09 Fuji, the problem is two-fold: - configuration 'crypto map MAPNAME isakmp authorization list GROUP-LIST' doesn't seem to be supported anymor...

Max-Morten Conrad · 05-07-2020

Hi forums, just a quick question regarding behaviour of AnyConnect sessions in the case of manually performed failover. Naturally, the VPN sessiondb is synced over an ASA failover cluster. My assumption is that when a manual failover of the cluster n...

Max-Morten Conrad · 04-06-2020

Hi forums, I recently discovered a strange phenomenon on one of our managed ASAs that I couldn't quite figure out. * Hardware: 2xASA5545 running AS OS 9.8(3)29* uRPF ist enabled via 'ip verify reverse-path interface <if>'* cluster protocol packets ar...

Max-Morten Conrad · 12-14-2020

I suspected as much - thanks for the Info @Rob Ingram.

Max-Morten Conrad · 04-06-2020

Makes sense - we indeed seem to be affected by this bug.Thanks a lot.

Member Since	‎02-04-2013 04:51 AM
Date Last Visited	‎02-07-2021 01:56 PM
Posts	6

User Statistics

User Activity

AnyConnect on ASA: DTLS Sessions established despite it being disabled in Group-Policy

CSR1000V 16.03 to 16.09: EasyVPN/Third-Party-IPSEC-Client Problems

Effect of manual failover on established AnyConnect sessions?

ASA active/standby cluster dropping its own failover packets due to uRPF

Re: CSR1000V 16.03 to 16.09: EasyVPN/Third-Party-IPSEC-Client Problems

Re: ASA active/standby cluster dropping its own failover packets due to uRPF