Hi guys,When the Dynamic Split Tunneling Include feature is configured to inject /32 IPs based on the DNS lookups of the FQDN, how ASA knows what was the DNS response if the lookups never traverse the tunnel? Is there some sort of DNS sniffing on you...
Forum Posts
Resolved! ASA stuck Anyconnect connection
Hi, I have configured Anyconnect VPN with auth and authz towards ISE. IP address is assigned in the authz profile. The problem is when the internet is lost on the PC or PC goes to sleep and after the connectivity is back or PC wakes up then the anyco...
I am having an issue with using a smart card (SC) to authenticate an SSL VPN using Cisco Anyconnect. SC authentication worked until recently. I am able to SC authenticate from other windows 10 and MacOS Monterey 12.6 systems so I dont think the issue...
Hi,I am in the process of setting up a VPN split tunnel for Microsoft Teams. I currently use Cisco Anyconnect to connect using the Cisco ASA.Does anyone have a comprehensive list of activities which need to be completed. I have configured dynamic t...
Recently I deployed certificate auth for our remote VPN clients and it works for the most part, but for Win users that have multiple Personal certificates AnyConnect has no way of selecting correct machine cert that is coming from our CA so I had to ...
Hello all, I'm doing a firewall project and currently I need to remote access user to route to a difference next hop than the one they use currently.Flow is the Anyconnect remote access users terminate onto the ASA and route internally to internal se...
I'm wondering if the Cisco iOS app is subjected to the VPN data leak issues as reported here: Legacy VPN software on iOS. Do you feel secure? (jamf.com)We opened a support ticket with Cisco, and Cisco says its an Apple issue, but based on what I'm se...
Have a long working RA-VPN environment with a request to route AnyConnect client traffic through the VPN and then across an MPLS connection a specific set of IPs. I have added those networks/IPs to the split-tunnel ACL, exempted them from NAT and ma...
HI All,I am having issues connecting to cisco anyconnect in lab environment getting TLS failures my config, license and error logs are given below. I have confgured one of the interface as outside and enabled webvpn there. Tried using both web brows...
Hello fellow users,I have configured Cisco Anyconnect VPN on Cisco FTD managed by Cisco FMC. I have also configured that all the internet traffic should go through the Cisco Anyconnect VPN. I have configured the following NAT U-Turn rule:The VPN Anyc...
Hello,I ran into a issue recently and I'm wondering if anyone has any insight. Migrating my AC clients to an external Windows DHCP server. no matter the size of the scope, whether its a /27, /24, /22... it will only hand out one address per scope and...
We have a customer who has two ASA5512-X's that are used purely for AnyConnect remote access VPN. They have a 250 User perpetual license (L-AC-PLS-P-250) which has a multi-use PAK key. This has been applied to the two ASA5512-X's. They are migrati...
Hi All, Customer was using the Auth Proxy and radius connection to NPS server. They have some 3rd party contractors that get IP addresses passed from AD when the logged in so they have specific rules applied to them. Customer decided to go with SAML ...
We have a remote access VPN configured with VPN client able to access all inside network resources.This is configured as a split tunnel, No NAT on Inside to Outside for the Inside network to RA VPN address pool. Access control policy applied Outside ...
Hi everyone, Anybody else have seen an error message "Automatic profile updates are disabled and the local VPN profile does not match the secure gateway VPN profile. Contact your system administrator. Everything is working without a problem on window...
