Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ngkuchman
03-13-2019
Stats
Member since
07-06-2007
13
Posts
0
Helpful
0
Solutions
Created by
ngkuchman
in Application Networking
in Application Networking
03-17-2017
09:51 AM
03-17-2017
09:51 AM
We enabled WAAS between two locations and file shares on Windows 2012 deduplicated volumes are viewable, but cannot copy to/from them. No issues with non deduplicated file shares between the same locations.
... View more
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
08-16-2013
11:11 AM
08-16-2013
11:11 AM
The KCD seems to be configured properly, the ASA is added to the 2008 Windows AD, but the sso process is failing. A Wireshark capture generates a Kerberos error KRB5KDC_ERR_BADOPTION NT Status: STATUS_NOT_SUPPORTED. I have already disable pre-authentication for the Windows user account I am using as a test. I have also updated the ASA object in AD for Delegation to Trust the specific SPN I am trying to reach. Any thought on where to look next to try to get this working?
... View more
Labels:
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
01-11-2013
06:55 AM
01-11-2013
06:55 AM
I have opened a TAC case and a ticket with McAfee. Cisco has deffered the issue to McAfee as the mini-dumps all point to McAfee HIPS. McAfee has supplied a Hotfix for HIPS, but we are still in the testing phases and don't have enough data to determine if the hotfix resolves the issue. In testing prior to the hot fix from McAfee, several users had indicated that if they wait ~30 minutes after starting up the computer before they establish the AnyConnect session they don't get the BSOD. You may want to see if this is the same for your users to at least give them a means to connect.
... View more
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
12-11-2012
06:23 AM
12-11-2012
06:23 AM
Did you ever get an answer to this, I have users asking the same question.
... View more
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
12-07-2012
08:11 AM
12-07-2012
08:11 AM
We have been seeing a growing number of complaints from users that when they are connected via AnyConnect 3.1.00495 on Windows that they are getting BSODs a few minutes after the connection is established. We are running McAfee HIPS version 8.0 / Build Number 8.0.0.2151 / Security Content Version 8.0.0.4634 / Patch 2. The BSOD always seems to come from mfefirek.sys with DRIVER_IRQL_NOT_LESS_OR_EQUAL. I can stop the HIPS service in Windows and restart the computer and the BSODs stop.
... View more
Labels:
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
12-03-2012
08:48 AM
12-03-2012
08:48 AM
I can't seem to find any documentation that shows how to update/configure advanced bookmark post information via the CLI. Can someone point me in the right direction, or is it only possible via ASDM?
... View more
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
11-27-2012
07:56 AM
11-27-2012
07:56 AM
I just tried from another computer with the same result. Both are using ASDM 7.0(2) and Java 7 update 9 Not sure if it makes a difference, both computers are also Windows 7 x64.
... View more
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
11-27-2012
06:37 AM
11-27-2012
06:37 AM
I have an ASA 5550 running 8.4(5) and have installed ASDM 7.0(2), but when I try to manage the bookmarks under the Remote Access - Portal when I try to edit an individual item in a bookmark list the screen does not display any information. Is this a know bug, or do I need to have a specific java version for the new ASDM? As a side note, I have not noticed any other issues with the new version of ASDM, only the bookmarks. I initially tried to downgrade the ASDM version that I was using to connect, but it will no longer allow me to connect.
... View more
Labels:
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
10-18-2012
06:49 AM
10-18-2012
06:49 AM
Thanks for the info. Based on your input I have created 2 different DAPs, one using the primaryGoupID of 513 to capture the standard account Domain Users and one that uses memberOf = Domain Users for any accounts that might have had there primaryGroupID changed. It seems to be working.
... View more
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
10-17-2012
12:59 PM
10-17-2012
12:59 PM
It seems no matter what group I add an account to the ldap memberOf finds it except for the Domain Users group. Is there a specific exclusion of this group somewhere? It doesn't appear to be an issue with the space in the name because if I test with other default groups like Domain Admins it works. I am getting the same result from both the ldap attribute map as well as trying to use the Domain Users group in a DAP policy. A debug ldap 255 returns every other group membership for an account except for Domain Users. When I issue the command 'sh ad-group LDAP filter "Domain " ' the Domain Users group is in the results list, so it is able to see it and it exists.
... View more
Labels:
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
10-04-2012
08:27 AM
10-04-2012
08:27 AM
We have an internal Windows CA and all domain computers have it listed in there Certificate store in their Trusted Root Authorities list, but when I try have host scan do a certificate check it doesn't seem to find it. However if I copy the cert to the local computer>Personal store it is working. Is this the expected behavior is should hast scan be looking in additional stores other than the personal one?
... View more
Labels:
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
09-25-2012
12:11 PM
09-25-2012
12:11 PM
We have many users that currently connect via Microsoft Forefront TMG server that is able to take the full URI and proxy the request. I was trying to provide the same level of flexibility using the ASA WebVPN. I already am using DAPs to build the WebVPN portal and provide bookmarks based on AD group membership, but the bookmarks are static also and even with the flexibility of using macros and variables still don't provide the same experience.
... View more
Created by
ngkuchman
in VPN and AnyConnect
in VPN and AnyConnect
09-25-2012
11:34 AM
09-25-2012
11:34 AM
I have configured multiple connection profiles and added group urls to put the users directly into corresponding group policies ( https://exampledomain.com ) and this is working fine if the requested url is an exact match, but if the user tries to connect to a content url further into the system ( https://exampledomain.com/_layouts/Authentication.aspx ) the ASA doesn’t match and sends the user to the DefaultWebGroup instead. Is it possible to use a wildcard in the Group URL ( https://exampledomain.com/* ) so no matter what the sub-content is it always uses the connection profile? If there isn't a way to do this, what are some alternative methods to accomplish this, other than to keep using the existing MS Forefront TMG Server?
... View more
Labels:
Created by
ngkuchman
in Application Networking
03-17-2017
03-17-2017
We enabled WAAS between two locations and file shares on Windows 2012
deduplicated volumes are viewa...
Created by
ngkuchman
in VPN and AnyConnect
08-16-2013
08-16-2013
The KCD seems to be configured properly, the ASA is added to the 2008
Windows AD, but the sso proces...
Created by
ngkuchman
in VPN and AnyConnect
01-11-2013
01-11-2013
I have opened a TAC case and a ticket with McAfee. Cisco has deffered
the issue to McAfee as the min...
Created by
ngkuchman
in VPN and AnyConnect
12-11-2012
12-11-2012
Did you ever get an answer to this, I have users asking the same
question.
Created by
ngkuchman
in VPN and AnyConnect
12-07-2012
12-07-2012
We have been seeing a growing number of complaints from users that when
they are connected via AnyCo...
Created by
ngkuchman
in VPN and AnyConnect
12-03-2012
12-03-2012
I can't seem to find any documentation that shows how to
update/configure advanced bookmark post inf...
Created by
ngkuchman
in VPN and AnyConnect
11-27-2012
11-27-2012
I just tried from another computer with the same result. Both are using
ASDM 7.0(2) and Java 7 updat...
Created by
ngkuchman
in VPN and AnyConnect
11-27-2012
11-27-2012
I have an ASA 5550 running 8.4(5) and have installed ASDM 7.0(2), but
when I try to manage the bookm...
Created by
ngkuchman
in VPN and AnyConnect
10-18-2012
10-18-2012
Thanks for the info. Based on your input I have created 2 different
DAPs, one using the primaryGoupI...
Created by
ngkuchman
in VPN and AnyConnect
10-17-2012
10-17-2012
It seems no matter what group I add an account to the ldap memberOf
finds it except for the Domain U...
10-04-2012
We have an internal Windows CA and all domain computers have it listed
in there Certificate store in...
Created by
ngkuchman
in VPN and AnyConnect
09-25-2012
09-25-2012
We have many users that currently connect via Microsoft Forefront TMG
server that is able to take th...
Created by
ngkuchman
in VPN and AnyConnect
09-25-2012
09-25-2012
I have configured multiple connection profiles and added group urls to
put the users directly into c...
Public Statistics
| Date Registered | 07-06-2007 10:11 AM |
| Date Last Visited | 03-13-2019 11:00 AM |
| Total Messages Posted | 13 |
