HI All, I have a Cisco 1941-SEC/K9 router and I would like to check if it has site-to-site and SSL VPN features enabled. Could you please let me know what command I must run to check if these features are enabled? Thanks
Forum Posts
I am planning to enable Hostscan on ASA to verify if the Windows devices comply with the security policies or not. One of the requirements my customer requested is to ensure that all devices are to enable Windows Update automatically. Also, the devic...
I am trying to renew SSL vpn cert on FTD through FMC. I am following the guideline "Install and Renew Certificates on FTD Managed by FMC". I am doing the PKCS12 Renewal. I created the CSR and now received the cert. There are two commands in Open SSL ...
Hello.In the most standard vanilla ASA-5525 split tunnel config, and also routing config...when a www IP-address is added to the split-tunnel ACL, does that traffic hairpin out of the ASAs outside interface to the www, or does it traverse the LAN to ...
We have an FMC that manages two FTDs both running 7.0.4. AnyConnect 4.10 is the VPN client we use. All our users are setup as a local realm (No AD integration) I was exploring the canned reports that come with the FMC. Has anyone tried to generate a ...
Cisco AnyConnect is constantly connecting and disconnecting when the user starts up each morning. eventually it connects permanently. See the screenshots from the event logs and also from the VPN message history. Searching through the DART bundle at ...
Hey,I have one of our locations connected to our headquarter via VTI Tunnel Interface over our Cisco ASA VPN-Firewall. Now I have the need to PBR that incoming traffic at the ASA in our headquarter (Software Version 9.14(4)17). So I configured the ex...
let's say inside network A is 10.0.0.0 /24 and the peer on the other inside is 192.168.1.0/24. Would a static route on each make each peer pingable and see each other? Or is this mainly done via the ACL? I am expecting NAT should be turn off on the v...
Has been able to F5 GSLB to load balance AnyConnect SSL remote access VPN or is there a guide anywhere? We currently have two ASAv50s deployed in our two main data centers and we want to be able to use our F5s with GSLB to load balance the traffic b...
Hello,I'am trying to access via vpdn to my cisco router ASR1002x from my iphone but that's not successfully ! I'am using VPDN setting and its work on my windows pc but not on my iphone the config that i use is : vpdn enable!vpdn-group 5! Default L2TP...
Resolved! ASA5545-X IPSec VPN Configuration
Hello Folks, We have got a new requirement from the client to configure IPsec S-2-S VPN with their 2 remote sites. This means at our end VPN is built on ASA 5545-X(managed by FMC) and the remote end is 2 client sites. The encryption domains are the ...
Hello Everyone, i have some Trouble to get NAT working on my Cisco C921-4P 15.8(3)M2. Here my Network Overview: ASA Firepower 1120 (172.16.1.254/24)<->[VPN to C921] <-> 3rd party Router <-> C921 (192.168.10.33/24). The ipsec VPN is working fine. I h...
Hi there, Few questions here:What is the easiest way to renew CA cert on FTD through FMC?Does it require creating new trustpoint etc?Is it ok to generate CSR on FMC or should I use OpenSSL? Is the format .crt can be imported directly or does it requi...
Hello! I need to configure a VPN Client-To-Site with a backup on other Wan ports. I know I can do it With FMC, but this Firewall is installed on a location that don't have a server and will not use FMC. Theres a Way to do it by FDM or CLI?
Hello community, My case is this (refer to the topology in attachments): I want to perform 3 site-to-site VPN between FTD-DC and FTD- Branch. The problem is we only have 1 public IP address of ISP-1 in FTD-DC. The 1st VPN will work fine using as re...
