Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I see that starting from version 8.x of ASA, an optional word "secure" has been added with logging host command. That is.,logging host <int> <ip> <tcp/port> secure,But has any one got it working, without using Cisco MARS. I am trying this with other ...
I have a strange requirement from one of our customers, that is to have 2 vpns between same source and destination.and protecting same two networks...is it possible? has any one done something like that..Gaurang.
Hi, how do I assign public ip address that is not assigned to firewall to an AIP SSM, what is best way of accessing AIP-SSM web interface over internet??I mean currently there is some 10.x.x.x ip address is assigned to AIP-SSM if and that ip address ...
Hi,I have configured webvpn as well and ipsec client vpn on asa 5510 7.2(3). I want webvpn to be enabled only for selected ids, at present all ipsec client vpn users are also able to login to web vpn.Gaurang.
Hi,I did nessus scan for my ASA running os version 7.0 and getting ports such as following open. Any idea what could be opening those ports and how to close them?h323hostcall (1720/tcp)ndmp (10000/tcp)msnp (1863/tcp)Gaurang.
yes, i have done right stunnel config, and right tcp/port given in ASA, it would be great if you can summarize steps or point me to url that explains this in detail. Thanks,Gaurang.
if you read my first post, i have clearly said..for secure connection i am using stunnel, which then forwards unencrypted packets to KiwiSyslog listening in TCP port.
Yes it does work normally with Kiwi server, no info available not just with Cisco but anywhere else through googling. I dont think any one has got it working yet.
my RA pool is 172.16.100.1-172.16.100.254, my client is getting ip 172.16.100.1 assigned to it and the default gateway that he gets is 172.16.100.2 this is strange, as for vpn the gateway should be same as assigned ip address.
