Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello, I have few Cisco ASA 5510 (9.1.(5).19 / 7.3(1)).There are few ACLs that are in use in DAP.When I try to add FQDN objects to these ACLs I get the following: Access-list contains user, user-group, security-group or FQDN objects. These are not su...
Hello guys, our company has the following design. Three datacenters in different countries.In each DC there is a core. It is usually stacked 3750X switches.OSPF runs on the cores to exchange internal routesTwo borders in each DC. It might be Cisco, J...
Hello guys, I have a running ASA with Anyconnect and HostScan. We use DAP policies to terminate the connections from various OSes, checking for keys in win registry and etc. Now I would like to somehow log all possible parameters gathered by Hostscan...
Hello,I have AnyConnect instance working on ASA 5510.There are two profiles, two aliases and two policies configured.Users are authenticating with certificates. Is there a way to force user to use specific AnyConnect Group? For example, based on user...
Hello guys,we have two companies, that would like to use one ASA for VPN via AnyConnect.What do I have:1 x ASA 55102 VLANS 2 IPs from different subnets2 SSL certs for VPN What problem do I have:I have added two VLANs and two subnets, but only one IP ...
Found the solution.
In ASDM do the following:
Configuration -> Device management -> Logging -> Logging Filters
Choose logging destination you need, then in Syslog from Specific Event Classes do:
Event class: dap
Severity: debugging
Then in logs ...
Just to be clear - the idea hear is to have two external domains for AnyConnect for two companies:vpn.company1.orgvpn.company2.orgThat is the main idea and goal.