About raymng

raymng · 10-18-2024

Hi there,I want to know the IP pool usages on the Firepower for Remote Access VPN users.From the CLI (via system support diagnostic-cli), I can do:show ip local pool [pool name] The 'ask' is if there is other ways to get this info?Does this info avai...

raymng · 08-16-2024

Hi there,I am setting up a new Firepower to be used solely for Remote Access VPN purpose. One interface pointing to the external network, and one interface toward inside network. All AnyConnect VPN traffic would be pointing to another internal fi...

raymng · 07-26-2024

Hi there,I am using a Firepower 3110 to setup Remote VPN services for AnyConnect users. When I editing a VPN group policy (from FMC web UI), there is the "Client Firewall Rules" setting under the "AnyConnect" tab, and the "Traffic Filter" under the ...

raymng · 12-22-2022

Hi there,Read the Admin guide about the endpoint purge policy but can't find answer.There are several endpoint groups that I want to purge endpoint older than 15 days. I know about using the "ElapsedDays GREATHAN" conditions. The "ask" is if I can ...

raymng · 05-21-2012

Hi,I would like to better understand conceptually how does "AnyConnect with Certificate authentication" work.I have been doing AnyConnect with external radius server authentication, but never try certificate auth.My perception is that we would genera...

raymng · 10-21-2024

Hi there,Unfortunately we don't use DHCP services, but use local IP pool built on the firepower to provide IP assignment to AnyConnect use.The current command "show ip local pool" give us what we need (how many IP allocated, and how many are still av...

raymng · 10-21-2024

Thanks Kasun. Guess the answer is a no, that you are not aware any easy solution to monitor how many IP in the local IP pool has been allocated.

raymng · 08-19-2024

thanks. I will do some testing myself to ensure I fully understand your info. Currently, I have VPN bypass enable.

raymng · 07-12-2012

I am the original poster. We made some good progress with help from Cisco TAC.As to your question, do you actually mean installing MS CA root cert onto the ASA so ASA can authenticate the client cert presented by remote user machine? If so, this is...

raymng · 03-06-2012

Under EAP-TLS, does the wireless login process involved user authentication beside client certificate? One of the primary trigger for us to look into this option is to get a two-factor authentication setup for the wireless network.Thanks.

Member Since	‎02-11-2002 12:44 PM
Date Last Visited	‎10-24-2024 01:37 AM
Posts	29
Total Helpful Votes Received	7

User Statistics

User Activity

Firepower VPN local IP Pool usage

Access control policy in the Remote Access VPN Firepower

AnyConnect VPN - Traffic filter vs Client Firewall Rules

ISE 3.1 - Purge Rule for multiple endpoint groups

AnyConnect and Certificate auth

Re: Firepower VPN local IP Pool usage

Re: Firepower VPN local IP Pool usage

Re: Access control policy in the Remote Access VPN Firepower

AnyConnect and Certificate auth

Re: WLAN using EAP-TLS