Hi There, Can someone assist me on below queries, Is route-based vpn possible on Cisco ASA device? I installed Policy based VPN, but not sure on this route-based VPN. If possible, how we can configure both policy-based VPN and route-based VPN on the same device. (Reason: In my environment the requirement is to configure both type of VPN's on the same Cisco ASA device) Thanks & Regards, Gan ... View more

Hi Can someone help me to understand, why SSL VPN lacks in Anti-Replay attack protection? Also please let me know if there is anyother security concerns in SSL VPN comparing to IPSec VPN. Thanks for your time in advance. Regards, Gan ... View more

Hi All, Can someone help how ASA device forwarding traffic to AIP-SSM? I'm not taking abt Configuration part like Class-map, policy-map and service policy....want to understand the traffic flow from ASA once traffic matched with ACL to AIP-SSM. From one of Cisoc document, understood that the module using a Cisco Propietary protocol for communicating with ASA appliance. ================================================================================================================ FYR from Cisco Website: Q. How does the Cisco ASA AIP-SSM plug into and communicate with the appliance? A. The Cisco ASA AIP-SSM plugs directly into the SSM slot in the Cisco ASA appliance's chassis. This provides a direct connection to the appliance's backplane. Once the module is installed, a proprietary protocol runs over the bus and controls data flow and messaging between the module and appliance. ================================================================================================================ Regards, S.Vinoth ... View more

Hi ,                   Edited the "sshd_config" file to support only for the SSH version 2 and killed the session using "kill -HUP pid". But still SSH version 1 is working. Also confirmed the the sshd_config file saved properly (protocol 2). Please help. Thanks in Adcance -Gan ... View more

Hi, While enabling Global correlation, I understood that we need to configure proxy or DNS. Also, I hope that needs to open the port (80/443) on the firewall for the management IP address of IPSto reach the cisco sensor database. If i'm correct what about the destination IP, do we need to enable "any" or specific IP is there. ACL: Source (IPS Management IP) -> Port (80/443) -> Destination? ... View more

Hi Team, 1. Some time able to access Server / other Firewall from SLL VPN through SSH (Plug-in), but the same is not working frequently. From IE it's not at all working, however it's working from Mozilla ( Only on some machines). 2. After entering the credential on required box after Java loaded, the connectivity shows connected, but unable to enter nothing on the SSH screen. Please assit. Regards, S.Vinoth ... View more

Hi, Please let me know how to enable HTTP inspection in ASA 5505 through ASDM. . ... View more