About Teresa.A.Strickland

Teresa.A.Strickland · 04-04-2023

We recently discovered that Anyconnect is allowing unauthorized users to connect. We use ldap strings to establish authorization. I tried setting up dynamic-access-policies to restrict authorization to the ldap strings but even with the permit and th...

Teresa.A.Strickland · 03-17-2023

I have over 130 devices where Anyconnect is permitting any domain user to login. We have an ldap string configured but logins aren't being restricted to the AD security group in the ldap string. My devices include FP2110 (ASA not FTD), ASA 5508 and 5...

Teresa.A.Strickland · 08-31-2022

I've been going round and round with this. I installed a wildcard certificate on an ASA. Then I exported the certificate to a pfx but I'm unable to import it on another ASA. I have an open TAC case and the tech tried all the same things I did. I am ...

Teresa.A.Strickland · 04-12-2019

A co-worker asked me if it is possible to clear only one line of an access-list on an ASA. I've never had the need to do that but I'm curious now. Can it be done?

Teresa.A.Strickland · 10-24-2017

We are having an issue with intermittent slowness when accessing load balanced servers behind an F5. I was wondering if anyone could explain why when I use certain types of NAT, the issue is resolved. I've tried every type of NAT there is. When I use...

Teresa.A.Strickland · 05-18-2023

You can use the test function with aaa commands to get the correct LDAP string case. Thank you so much for the tip Rob. One would think that the case wouldn't matter especially when it previously worked. IT DOES MATTER THOUGH!

Teresa.A.Strickland · 04-14-2023

I corrected the U in Users. Still fails.

Teresa.A.Strickland · 04-14-2023

Thanks Rob. Will do.

Teresa.A.Strickland · 04-14-2023

Sorry for the late reply Rob. I've had my hands full.I also noticed it wasn't picking up the group-policy and I was actually trying to login. Here's the ldap string from the configuration. I'll ask my customer for the exact ldap string to make sure m...

Teresa.A.Strickland · 04-06-2023

Reposting the ldap string. It is as you asked now. ldap attribute-map ANYCONNECT map-name memberOf Group-Policy map-value memberOf cn=AC-VPN,cn=users,dc=xxx,dc=xxxxx ANYCONNECT_GP

Member Since	‎04-02-2015 08:15 AM
Date Last Visited	‎02-23-2024 12:04 AM
Posts	28
Total Helpful Votes Received	1

User Statistics

User Activity

Anyconnect Allowing Unauthorized Uers to Connect

Anyconnect - any domain user authenticates - not using ldap string

Need to Export a WildCard Certificate for Use on Other ASAs

clear one access-list line

Difference in Functionality between types of NAT

Re: Anyconnect Allowing Unauthorized Uers to Connect

Re: Anyconnect Allowing Unauthorized Uers to Connect

Re: Anyconnect Allowing Unauthorized Uers to Connect

Re: Anyconnect Allowing Unauthorized Uers to Connect

Re: Anyconnect Allowing Unauthorized Uers to Connect