Hi All   I got a question about the cisco 4431, is it possible for this device to handle a High Availability (active-stanby) configuration between two WAN or MPLS links? I'm a little confuse if the device needs the VIPTELA or DNA license or it doesn't need any special license.   Also i'm a noob in VIPTELA or DNA fields so that why i'm asking.   Thanks ... View more

Hi guys   I got a situation with an IPsec Tunnel and i don't know what else I need do, this is the situation:   I already configured a VPN Tunnel between my Cisco ASA and a Fortigate 100D everything is up (Phase 1 and Phase 2), this tunnel was created because we need to monitor 5 devices (couple of switches and a call manager) the devices that we already monitoring are the Switch Core (10.0.5.20) and the Call Manager (10.0.5.21) (the IPs are not the real ones is just for information) but we got problems trying to reach 3 Switches that are on a different network (10.0.1.x)    When i send a ping from my server (172.26.5.80) to one of the devices let's say 10.0.1.5 I see that the packet reach the Cisco asa and send it through the Tunnel but on the Fortigate side they don't see anything they only see the request to the IPs 10.0.5.20 and .21   If I execute the ping backwards i mean from the 10.0.1.5 to my server 172.26.5.80 it doesn't respond until i execute a ping from my server to the switch looks like it's waiting to see the communication open on the Tunnel   About the configuration on both sides we already checked and everything looks good.   I hope all of you understand what i tried to explain.   Regards ... View more

Hi guys Hope you're great, I got a question about something that is happening right now. I already configure some VPN accounts but I'm noticing that if i do nothing the session disconnected me in 1 minute and 37 seconds approximately. About the timeout configuration on the groupo polciy is Unlimited and the configuration in the VPN accounts are also unlimited. Also i compare the configuration with other FW that is from the same customer and is the same so I don't understand why the session are getting disconnected. The message error that I get is the 412: the remote peer is no longer responding. One workaround that i found is that if i execute a ping to an IP that is on the Secured Routes the session it wont disconnected me but as soon as I stop the ping it take like 1 minute and i get the same message (412). Do have any idea about what else i need to configure, I'm running out of ideas. Regards ... View more

Hi guys Right now I got a problem on my company, the people with iPhone 6 or 6+ with iOS 8.1.2 or 8.1.3 when they try to connect to a VPN using the Anyconnect client receive the error "CERTIFICATE ENROLLMENT FAILED". And this is only happening with this version of iOS, if you try with other older versions it works, even on Android works.   Does anyone got this problem before?   Regards ... View more