Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi guys,
I have split tunneling configured and everything it works 100%. When the users are remotely connected to my network they use their ISP to go to the internet and it doesn't go through the VPN. The problem is i want access to certain IP addr...
I have a site to site VPN that runs on IPsecOverNatT(The external interface is NATTed on the router to a public IP),how do i disable this feature? I want to configure my external interface with a public IP and update it on the other side of the VPN....
I have an ASA 5525 with a SourceFire image, i would like to enable SourceFire and manage it through the FireSight management server. My problem is I already have the ASA's management interface configured with an IP address and I'm using it to manage ...
Hi all,
Cisco ASA running 9.2(3)
I am configuring Anyconnect VPN using Dynamic Access Policies and I have configured AAA LDAP against Windows Active Directory and this is working fine. What I would like to do is setup some granularity and create AD...
@Philip D'Ath
When i apply the "no sysopt connection permit-vpn" command the VPN connects successfully, however the users can't connect to any resources on the network even with those DAPs in place.
I have the following DAPs defined for each user group on AD. They are supposed to give each AD group access to a specific resource on my network.
dynamic-access-policy-record DfltAccessPolicy network-acl GR-SI-VPN-denydynamic-access-policy-record G...
@Rahul Govindan
I have a DAP ACL for each AD group,so no one user belongs to multiple groups.
The issue is that even though i defined specific DAP ACLs for each of the groups, It's not working as all the users in different AD groups are able to conne...
