Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Alexander Hartmaier
Alexander Hartmaier
Beginner
09/1995 - 06/2000 Schulzentrum Ungargasse (SZU) Betriebswirtschaft, Maschinenbau und IT, Matura
10/2000 - T-Systems Austria GesmbH
Recent Badges
Stats
Member since
11-23-2009
47
Posts
25
Helpful
1
Solution
Created by
Alexander Hartmaier
in Security Management
in Security Management
04-17-2019
08:56 AM
04-17-2019
08:56 AM
The ASAs support it and you only need to add the CA certificates of the root CA to the ASA if your syslog server sends the complete intermediate certificate chain, if not all the CAs forming the certificate chain. 'show logging' will show you four connected tcp/tls connections if it works. There is no way to configure the ciphers specifically for the syslog over tls connection, the ssl (tls) client settings seem to be used.
... View more
Created by
Alexander Hartmaier
in Security Management
in Security Management
06-13-2017
07:30 AM
06-13-2017
07:30 AM
After updating FMC to 6.2.1 the problem is solved, all previous versions seem to be affected.
... View more
02-22-2017
01:52 AM
The icmp inspection is only required for icmp packets going through the ASA, not to the ASA.
For to the ASA you need to allow the IPs to e.g. send echo-request packets to the interface via the system policy.
... View more
01-31-2017
11:14 AM
We just encountered the same issue on a FTD 6.2 and the fix was to add Default_Inspection_Enable to the FlexConfig policy and add 'icmp' to the 'enableInspectProtocolList' overrides.
This adds icmp to the 'policy-map global_policy' after which the ping was working.
... View more
08-31-2015
12:58 AM
nx.graphic.Topology defaults to using the index instead of the id for identifying link source and destinations, you have to set: identityKey: 'id', to make it use the ids which then also works with strings.
... View more
Created by
Alexander Hartmaier
in Tools
in Tools
08-27-2015
05:42 AM
08-27-2015
05:42 AM
When I access it through your link I get the same error message you get. Opening Cisco NeXt UI and clicking on Tutorials works for me.
... View more
Created by
Alexander Hartmaier
in Tools
in Tools
08-27-2015
04:59 AM
08-27-2015
04:59 AM
The tutorials under this url https://developer.cisco.com/media/neXt-site/tutorials/index.html ? Most of them work for me under Firefox 40 on Linux. Which browser are you using?
... View more
05-02-2014
04:20 AM
Sadly not, I keep getting this error also when trying to deploy the ovf instead of the ova.
... View more
04-29-2014
01:52 AM
I tried to deploy the new ASAv on my VMWare Workstation 10 but importing the ova file fails with "Error importing OVF: Line 330: Unsupported element 'Property'". Has anyone managed to get it running?
... View more
- Tags:
- #asa
Labels:
10-30-2012
09:29 AM
ASA 9.0 finally supports DHCPv6 relay but still no DHCPv6 server functionality with a local pool.
... View more
Created by
Alexander Hartmaier
in Security Blogs
in Security Blogs
06-21-2012
01:51 AM
06-21-2012
01:51 AM
Hi Frederic, can you point me at a list of vendors/models that also support such a config style?
... View more
Created by
Alexander Hartmaier
in Network Management
in Network Management
04-03-2012
05:53 AM
04-03-2012
05:53 AM
The router config is: ip sla 2700 udp-jitter 10.1.2.3 16400 source-ip 10.3.2.1 tos 64 vrf cust1 frequency 300 The output of sh ip sla stat 2700 includes: RTT Values: Number Of RTT: 10 RTT Min/Avg/Max: 3/3/6 milliseconds We need to get the average rtt value via snmp but the mib seems to only contain the min and max value in rttMonLatestJitterOperRTTMin and rttMonLatestJitterOperRTTMax. Is there a way to get the average value too which can't be calculated without knowing the rtts of every single packet?
... View more
Labels:
Created by
Alexander Hartmaier
in Security Blogs
in Security Blogs
01-24-2011
01:36 AM
01-24-2011
01:36 AM
Thanks for the quick answer Marcin! We only use SVTI to connect to other companies which means the other endpoint is often not Cisco and also not under our control. VTI always sends 0.0.0.0/0 as interesting traffic which would route all traffic through the tunnel on the other endpoint which makes it useless.
... View more
01-24-2011
01:19 AM
I'm struggling with the AnyConnect Client for Linux since it was released. With AnyConnect 3.0 released I've tried it again, and failed. The release notes list Ubuntu 10.10 as supported: http://www.cisco.com/en/US/partner/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html#wp949967 Although there is a special 64bit client to be installed on the ASA, the release notes say: AnyConnect SMC 3.0 reportedly runs on 64-bit Linux, although we do not support it. I've found numerous guides which all describe the old versions prior to the 64bit client release and how to install a 32bit Firefox and so on. The error message I instantly get when trying to connect is: AnyConnect cannon confirm it is connected to your security gateway. The local network may not be trustworthy. Please try another network. I'm behind a proxy but can resolve the ASAs hostname locally. Running the cilent as root didn't help and an strace didn't show anything useful either. Can someone please link to a current one or add one here? Thanks!
... View more
Labels:
Created by
Alexander Hartmaier
in Security Blogs
in Security Blogs
01-24-2011
01:07 AM
01-24-2011
01:07 AM
The feature is useless until you can configure the interesting traffic to be compatible with other vendors which is the main usage of IPSec in our business.
... View more
07-24-2019
Of course there is.So an implementation in Perl 5 from me at
https://metacpan.org/release/Net-Cisco-...
Created by
Alexander Hartmaier
in Security Management
04-17-2019
04-17-2019
The ASAs support it and you only need to add the CA certificates of the
root CA to the ASA if your s...
01-09-2019
If you read the updated release notes of 6.3.0 you will see that build
84 fixes an upgrade bug when ...
Created by
Alexander Hartmaier
in FirePOWER
12-12-2018
12-12-2018
I've written a FMC REST API client module in Perl 5 which we use to
cleanup access policies generate...
12-12-2018
Yes and immediately discovered a REST API bug: Each literal IP address
is returned as type:"FQDN" wh...
06-13-2017
After updating FMC to 6.2.1 the problem is solved, all previous versions
seem to be affected.
04-18-2017
An interface can only be assigned to a single zone but to multiple
interface groups enabling much mo...
02-22-2017
The icmp inspection is only required for icmp packets going through the
ASA, not to the ASA. For to ...
02-06-2017
Thanks for the pointers, especially the HA replacement section! I looked
in the backup/restore secti...
02-06-2017
Both icmp and icmp error inspection is disabled in FTD 6.2, was enabled
in 6.1. This breaks e.g. pin...
02-06-2017
Hi, I didn't find any documentation how to restore a failed FTD, for
example after a hardware RMA or...
01-31-2017
We just encountered the same issue on a FTD 6.2 and the fix was to add
Default_Inspection_Enable to ...
Public Statistics
| Date Registered | 11-23-2009 08:17 AM |
| Date Last Visited | 10-02-2019 04:25 AM |
| Total Messages Posted | 47 |
| Total Helpful Votes Received | 25 |
Helpful Votes Given To
.jpg "Hall of Fame Master"){kind=icon}
Helpful Votes From
