About bkastor

bkastor · 12-11-2016

I wasn't sure if I should add to: https://supportforums.cisco.com/document/12453081/lightweight-ap-fail-create-capwaplwapp-connection-due-certificate-expiration ...but I have this exact issue (pulling my hair out for a couple of hours, why isn't thi...

bkastor · 05-08-2006

I have two ISP's.. right now we are maintaining 2 firewall's (one is primarly for mail, the other is everything else). I wanted to replace them with 2 ASA's in multiple context's with failover. But in my reading, it says that sharing an inside inte...

bkastor · 09-09-2003

Can I use a 3640 to terminate vpn clients and allows split-tunneling... like the pix?

bkastor · 09-05-2003

Client has 3640 at their mail co-lo. They have a pix515 at the office. I now know that you can't terminate their clients to the pix and let them hop into the L2L to get down to their mail. I am hearing that I can do the reverse. Terminate the cli...

bkastor · 08-29-2003

I have a client that wants to monitor who is logging into a newly setup vpn. I can answer a question about them being logged in at that time, I even got the syslog setup to tell me, but surfing through that at that level is hilarious. Is there no w...

bkastor · 12-08-2017

Any help in trimming? Don't mean to hijack the thread, but we have been running several thousand users through a pair of ASA5555's and everything is zippy and working.. but reports are only showing about 12 hours in the past! I contacted TAC and...

Re: Sure, log in FMC. Go to · 09-08-2017

Just a heads up to anyone running 6.2.0.2-51... this still isn't fixed. I just opened up a case with TAC and the next day I stumbled on this thread. As soon as I removed the src/dst on the Identity Policy, it worked. I did not have this bug (or maybe...

bkastor · 08-25-2017

Hi deyster94,Can you change your Default Action to Allow? Just to test.. ?It looks like Phase 12 is saying that the traffic is in a BLACKLIST. Either that, or Trust the traffic, so it doesn't go through the IPS portion of the Policy. When I was doing...

bkastor · 08-21-2017

Hi deyster94,We did have this working.. but have pulled it apart (political.. you can almost hear the gasp at that!). Anyway, I have just labbed up an example here (I only have 1x5512 at the moment). My example just uses a vpn client to get into a 55...

bkastor · 07-28-2017

Very simple testing is completed and it works great..Anyconnect 4 client, ASA 9.7, Firepower 6.2 and a basic full tunnel with hairpin.. seems to block URL connections just fine. I manually specified facebook to block.. and then they received their UR...

Member Since	‎06-14-2002 05:40 AM
Date Last Visited	‎03-01-2024 12:02 AM
Posts	24
Total Helpful Votes Received	10

User Statistics

User Activity

Cisco 2504 with Cisco 1242's and old certificates expiring

two ISP's, two ASA's.. right?

ios vpn tunnel - split tunnel

terminate clients on 3640, then ride L2L to behind pix

vpn client audit... is only way cspm

Re: I strongly suspect a

Re: Sure, log in FMC. Go to

Re: FTD inspection on Hairpin L2L VPN

Re: FTD inspection on Hairpin L2L VPN

Re: FTD inspection on Hairpin L2L VPN