FTD at the hub site with dual ISP needs VPN to multiple spoke sites that have single ISPs.FDM doesn't let me to create a second route-based to the same remote gateway. I understand this is a limitation with FDM. So I have to make all tunnels policy-b...
Hi Community,I am trying to setup two route-based ipsec tunnels between cisco 3105 (Site A) and 2130 FTD (Site B) firewalls. The firewalls are behind a NAT device and the NAT device in turn is connected to two ISPs. The NAT device is responsible for ...
We are in process of upgrade cisco secure client and compliance module on LAN Endpoints. We are looking to upgrade 300 pilot LAN endpoints before we rollout on all endpoints in environment.We created new Client Provisioning Policy with specific Endpo...
How to assure CISCO Secure Client VPN will work perfectly over LINUX OS, Ubuntu or Mint distributions, because after installation sometimes there is no connection to corporate servers.
Just an FYI as this one was hard to find. All of our developers on MacOS Tahoe and the latest version of the Cisco Secure Client have the issue.### Root Cause Analysis of Spindumps 1. **Process Identification**:* The affected process is `cscan`, loc...
Dears, I hope you're doing great. I need some assistance with an issue. I have a Cisco 2120 NGFW appliance running FTD. Remote Access VPN is currently active on port 443 and integrated with Azure via SSO; however, when I change the port (e.g., to 54...
I'm pretty much lost. I keep bothering our IT with this problem, but they were unable to solve it. I'm using cisco anyconnect to connect to our VPN. Often -- especially after just having the VPN connection established -- the connecting breaks. anycon...
Recently an interviewer asked me a question: What is the point of using Geolocation filtering if that could be bypassed by a vpn. And when I think about it he was right, we use vpn so that we could access content which can't be access in our region. ...
I've been using CISCO Secure Client for years on my MacBoo Pro with MacOS Ventura 13.7.8, but recently, after the connection, CISCO started mandatory upgrade to version 5.1.20.333. The download and install is completed but after that, CISCO opens lik...
Hello everyone configured on my router after days i see log, 393563: Sep 10 06:44:22.375: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=a.b.c.d, prot=50, spi=0x8280(33408), srcaddr=e,f,g,h, input interface=Tunne...
Hello community,Starting from 5.1.17 version, secure client responds with all-zeroes NT-response during IKEv2 EAP-MSCHAP authentication, which causes authentication failure. User and peer-challenge are good though:(snippet from freeradius log)(19) ms...
For our IPsec connection, our site uses policy-based IPsec, while the remote site uses route-based IPsec.When I changed our site from policy-based to route-based, the router’s tunnel interface went up and the connection was encrypted, but the count o...
It is no doubt just me, but no matter how fast I try to click on the "Connect to:" dialog box, AnyConnect finishes connecting to its default before I can choose the group that I want. I know that if I were fast enough, that group would then become th...
I am migrating a remote location ASA firewall and the migration suppose to start in couple of days. But now site has a situation where the ASA (5505) is completely down and we have a situation where we have to configure the new FTD and make it work.S...
I've been trying to setup a VPN tunnel between a FTD and Azure, but I am having some issues where one BGP neighbor is stuck in Idle/Connecting.I don't have any access to the Azure side. That part of the configuration is done by my custumer. Here is t...
