Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
@davparker if you don't enable the group-alias the connection profile/tunnel group won't appear on the Secure Client profile list. Create a second connection profile/tunnel-group for Legacy that uses a group-url, then create a second XML profile on t...
@rbciscocom if the device is a VPN gateway then you'll need to ensure the existing VPNs are not using 3DES, MD5 or DH group 2/5, as they are not supported on newer ASA versions.
AES, SHA and DH group 14 is the minimum supported by the newer ASA versi...
@rbciscocom any reason why you are not using the FTD NGFW image instead of ASA?
There are no ASA 5506 images available for download any on the Cisco website.
Be aware the oldest version the 1220 supports is 9.22. Depending on what version your old fi...
@21211841 a typical XML profile is around 2-4 KB in size, it is unlikely to make a huge impact if a load of users connect at the same time. You can pre-deploy the XML profile (and the Secure Client VPN software) using your software management solutio...
@Mlex1 could it be one of your spoke routers that has a dynamic IP address that has changed? If this is not one your peer router IP addresses, then this is potentially a bad actor attempting to probe/attack your router.
If all your spoke routers have...