VPN

Hello,I had  updated a small office ASA 5508-X back in July, and had not needed VPN access again until recently.   The version I updated to was 9.16(3).  I generally use ASDM for management.  I really only want to support  AnyConnect VPN's, though I ...

GOAL: To add 2 public vendor IP addresses to an existing anyconnect "Split_Tunnel_ACL"CONFIGURATON:#object network MY_VPN_Pool#subnet 172.16.1.0 255.255.255.0#object-group network VENDOR_IP_GROUP1#network-object host 1.2.3.4#network-object host 1.2.3...

Hi.GIVEN:"access-list Outside_access_in extended permit tcp 170.100.1.0 255.255.240.0 object OBJECT1 object-group GROUP2"Does the above mean "Permit tcp from source 170.100.1.0/20 to object OBJECT1 and object-group GROUP2"?Thank you!

We just started deploying AnyConnect 4.10.05095 and we're running into a problem with M1 Macs. One of the connection profiles is for our higher security VPN which does a posture check using OPSWAT. When Intel Macs use this profile, it works just fine...

Hello.1. Within the below code snippet... tunnel-group COMPANY_WORKERS type remote-accesstunnel-group COMPANY_WORKERS general-attributesdefault-group-policy ABCD_VPNtunnel-group COMPANY_WORKERS webvpn-attributes...if the ASA does not find an attribut...

Hello.To configure an anyconnect split-tunnel within a very large ASA config, how do I determine which Group Policy and ACL is associated with the anyconnect VPN?Within the below snippet, if this was associated with anyconnect, wouldnt this say "ssl"...

I'm tasked with cleaning-up ASA configs. There exist a few certificates that have expired 2 years ago with no adverse effects.I already understand I should make new valid certificates, but honestly there seems no reason for this to be a priority.Am I...

Does anyone perhaps know what could be the cause of this error appearing only on iOS devices managed by Microsoft Intune?"The vpn configuration received from the secure gateway is invalid for the per-app connection"

Hi everyone, Just wondering if I need to create an inbound ACL on the ASA for it to establish a S2S tunnel?A lot of engineers say you need to, I understand if there is another firewall behind it that needs to establish a tunnel, but what if its just ...

Hi All I try to configure SAML for authenticate with anyconnect but  under  webvpn configuration for saml  I configure IP for ip of firewall but i found the issue about after redirect cannot trust certificate  I'm not sure this configuration working ...

Hello.I need to configure an ASA 5525 group-policy split-tunnel ACL, but the Cisco instructions seem illogical.Only traffic from 192.168.1.1   to   10.1.1.1 should travel through the VPN, and www traffic should travel through the remote user's www un...

Hello.Goal: Configure a VPN From 1.1.1.1 (inside LAN-1 subnet 192.168.1.0/24), to 2.2.2.2 (with LAN inside subnet 10.1.1.0/24.). All other traffic in both directions should not travel through the VPN, but through the regular www gateways.I must use a...