Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About richardblair
Stats
Member since
06-25-2013
5
Posts
0
Helpful
0
Solutions
Created by
richardblair
in VPN and AnyConnect
in VPN and AnyConnect
09-03-2013
11:33 AM
09-03-2013
11:33 AM
True. We should always ask how the change was being made. I would have thought adding to a pool would not cause existing connections to have a problem, but replacing the addresses and possibly make NAT changes and route changes associated with it could cause issues.
... View more
Created by
richardblair
in VPN and AnyConnect
in VPN and AnyConnect
09-03-2013
08:46 AM
09-03-2013
08:46 AM
I have an ASA 5515-x running 9.03, and have AnyConnect clients running version 3.1.04063. I am licensed for Advanced Endpoint Assessment and CSD. The issue I am having is when I client connects using TrendMicro AV, and the Trend service is stopped, the Endpoint Assessment recognized this and attempts to start (which is good!), but it fails to start with the following warning logged: [Tue Sep 03 10:53:38.957 2013][cscan][warn][scan_advanced_av] unable to enable antivirus (Trend Micro Client/Server Security Agent) At the end of the scan, it also logs that the check for activescan failed: [Tue Sep 03 10:53:43.668 2013][cscan][debug][get_data] endpoint.av["TrendMicroAV"].activescan="failed" The VPN conenction is then established and the user works as if everything passed (which is not good!). What I am looking for is: if restarting the service fails, like in this case, deny the connections and hopefully put up a friendly message that the access was denied because AV failed to start. Any ideas?
... View more
Labels:
Created by
richardblair
in VPN and AnyConnect
in VPN and AnyConnect
08-07-2013
06:36 AM
08-07-2013
06:36 AM
Also, are you able to ping these devices by address from the inside interface of your ASA?
... View more
08-07-2013
05:51 AM
Marvin, this is excellent! Not sure why I was never able to find it before, but thanks!
... View more
08-06-2013
01:50 PM
I have a Cisco ASA 5515, running 9.0(2) and device manager version 7.1(2). What I am trying to accomplish is to examine SSL/AnyConnect client requests, check to see if they are from a company PC and allow them access if the are. If they are not, I would like to check for AV/Spyware/Firewall and start them/update them if the need it, or deny access if they are missing, will not start or will not update. It seems to me that I need to implement a combination of features to accomplish this. The problem I am having is understanding which pieces of which I actually need. My ASA is licensed for AnyConnect Premium and Advanced Endpoint Assessment, so I think I have everything I need except the brain power to untangle this. Any help, such as good examples to follow would be much appreciated!
... View more
Labels:
Created by
richardblair
in VPN and AnyConnect
09-03-2013
09-03-2013
True. We should always ask how the change was being made. I would have
thought adding to a pool woul...
09-03-2013
I have an ASA 5515-x running 9.03, and have AnyConnect clients running
version 3.1.04063. I am licen...
Created by
richardblair
in VPN and AnyConnect
08-07-2013
08-07-2013
Also, are you able to ping these devices by address from the inside
interface of your ASA?
Public Statistics
| Date Registered | 06-25-2013 09:49 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 5 |
