Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello all, We have a project where we need to terminate a large number of IPSec VPN peers. At the moment we are using Cisco ASA 5555-X appliances with VPN Premium license.We terminate at the moment about 2000 IPSec VPN connection but we are in full d...
Hi All, I have a Cisco 2811 which terminates some serial connections from a customers. There is NAT configured in order to provide internet access and in addition, two encrypted GRE Tunnels over a leased line providing access to some services. There ...
Hi all, We are planning to use an ASA 5540 to terminate about 3000 IPSec connections. The maximum supported IPsec VPN Peers for this platform ist 5000, so this should be ok in theory. What is a bit unclear to me is what exactly happens when (for what...
Hi All, I have the following problem. I have an inside user which uses excessive amounts of bandwidth (citrix traffic) and I need to limit it. The ASA has a trunk to our backbone switch and over this trunk, two subinterfaces: lan and wan. QoS is conf...
Hi All,I have a small problem regarding ASA and syslogs. I have a site-to-site tunnel between a local ASA and a remote ASA. Behind the local ASA I have a central syslog server (which does not have the ASA as a default gateway) which collects messages...
It's still a fact that the API is poorly documented in many cases, in regards to how specific payloads should be constructed and so on. And while it's true that we can use the developer tools in a browser, we should not have to do that. As paying cu...
The field you're interested in is called "reachability", not "status". "reachability" will tell if you if the device is reachable from the vmanage's point of view (i.e. if the vedge has control connections up to the vmanage). It could be worse but th...
Yes, you can and it'll work. The recommended specs are a bit overkill and they are meant to cover the worst possible situation. Regarding TAC, it all depends. Most TAC engineers will have decent common sense and if it looks like your lack of recomme...
