I have enabled and http proxy server for webvpn.   webvpn    http-proxy 1.2.3.4 8081   There are particular group policies in which I want to disable the proxy.    group-policy no_proxy attributes  webvpn  http-proxy disable   This doesn't work. The proxy is still in use under this group policy. Any ideas? ... View more

Need a hand here trying to figure out an odd situation. I have 2 ASAs directly connected to each other at Site A and Site B. I have site to site vpns terminating at Site A. Remote sites communicate with networks inside Site A (172.25.0.0/16). Every once in a while, I notice that my MAN connection between the 2 firewalls is saturated with 20Mb/s of traffic in each direction. It seems that Site A ASA is sending traffic from the site to site destined for 172.25.x.x towards Site B. Then site B turns around and sends the traffic back to Site A, Site A ASA then sends back to Site B. Routing ping pong? This repeats itself over and over again. Routing tables are correct in each device. Site A 5516-x should be sending traffic destined to 172.25.4.x to vlan4 interface, not GRN interface. I have no idea why this is happening. (outside vpns, 172.16.x.x) Site A 5516-x (GRN interface 172.27.10.17) <--------------------> Site B 5510 (177 interface 172.27.10.18) (inside vlans, 172.25.0.0/16) Site A sho conn ICMP GRN 172.16.10.246:1 GRN  172.25.4.40:0, idle 0:00:00, bytes 41602656, flags X this would also show the UDP connection shown below in Site B, but I deleted this connection (actually had to shun the ip and delete the conn as it kept reappearing) Site A sho route C        172.25.4.0 255.255.255.0 is directly connected, vlan4 Site B sho conn ICMP 177 172.16.10.246:1 177 172.25.4.40:0, idle 0:00:00, bytes 9644640 UDP 177 172.16.9.5:161 177 172.25.4.20:60393, idle 0:00:00, bytes 2553741606, flags - Site B sho route R    172.25.4.0 255.255.255.0 [120/1] via 172.27.0.17, 0:00:21, 177 ... View more

Could someone please tell me how to go about getting UCCX 7 upgrade media? I recently got a UCSS contract which should allow me to upgrade but cannot figure out how to get the media. The PUT tool only allows upgrades to version 8.x+. TAC was no help and told me I needed to buy it? Isn't that what I bought UCSS for? Anyway, this has been going on for over a year now, if anyone could help me out it would be greatly appreciated.                   I am currently on 5.0.2 and would like to go to 7.x. ... View more

Unfortunately, it does not appear as if the SRP500 series will allow you to create an ipsec policy where the local or remote traffic selection is 0.0.0.0/0.0.0.0. It wants a specific network. I have a scenario where I want to send all traffic over the vpn tunnel. Is there a workaround to this or a special way to input "ANY" as the remote network? If not, hopefully someone at Cisco will read this and put it on the roadmap. Thanks. ... View more