Hello.In the below config snippet...-----object network VPN-Pool nat (Outside,Outside) dynamic interfaceobject network VENDOR_1 host 1.1.1.1object-group network VPN_VENDORS network-object object VENDOR_1access-list Split_Tunnel extended permit ip ...
Forum Posts
Hello.I will be troubleshooting ASAs indefinitely. I have basically zero experience with the Cisco "Packet Tracer" software.1. Is Cisco "Packet Tracer" software good for troubleshooting ASA issues?2. Does it allow me to input the config of ASA 5525s,...
May you please explain the relevance of this code, perhaps for the Anyconnect logic?...object network VPN-Poolnat (Outside,Outside) dynamic interface...and this...nat (Outside,Outside) source static VPN-Pool VPN-Pool destination static VPN-Pool VPN-P...
Hello.1. I am confident I correctly implemented a split tunnel config, so let's for now accept that as given.2. The server BOTTOMLEVEL at BOTTOMLEVEL.middlelevel.com does not live at the natural DNS location of middlelevel.com (the URL is definitely ...
In the past when I connected to AnyConnect, the WiFi symbol in the bottom right of my screen would switch to ethernet and show my work network. If I go to google maps, it also shows my general home location. I can see that Anyconnect is connected. Ho...
Hi All,I found that it is not possible on the anyconnect !http://www.cisco.com/en/US/products/ps8411/products_qanda_item09186a00809aec31.shtmlSupported featuresQ. Is it possible to save the password credentials on AnyConnect so that it will not reque...
Hello.Please see screenshot. I am unable to configure an ACL because of the below strange CLI error. Maybe it has to do with the long input on one line. May you please assist?Thank you.
Hello,I had updated a small office ASA 5508-X back in July, and had not needed VPN access again until recently. The version I updated to was 9.16(3). I generally use ASDM for management. I really only want to support AnyConnect VPN's, though I ...
GOAL: To add 2 public vendor IP addresses to an existing anyconnect "Split_Tunnel_ACL"CONFIGURATON:#object network MY_VPN_Pool#subnet 172.16.1.0 255.255.255.0#object-group network VENDOR_IP_GROUP1#network-object host 1.2.3.4#network-object host 1.2.3...
Hi.GIVEN:"access-list Outside_access_in extended permit tcp 170.100.1.0 255.255.240.0 object OBJECT1 object-group GROUP2"Does the above mean "Permit tcp from source 170.100.1.0/20 to object OBJECT1 and object-group GROUP2"?Thank you!
Hi! Can anyone please tell me what is the MTU when using DMVPN (mGRE and NHRP + IPSEC, ESP with tunnel mode)? When I use the command "ip mtu XXXX" to configure interface tunnel 0, what does this MTU contain? Does MTU include all the fields in this im...
We just started deploying AnyConnect 4.10.05095 and we're running into a problem with M1 Macs. One of the connection profiles is for our higher security VPN which does a posture check using OPSWAT. When Intel Macs use this profile, it works just fine...
Hello.1. Within the below code snippet... tunnel-group COMPANY_WORKERS type remote-accesstunnel-group COMPANY_WORKERS general-attributesdefault-group-policy ABCD_VPNtunnel-group COMPANY_WORKERS webvpn-attributes...if the ASA does not find an attribut...
Hello.To configure an anyconnect split-tunnel within a very large ASA config, how do I determine which Group Policy and ACL is associated with the anyconnect VPN?Within the below snippet, if this was associated with anyconnect, wouldnt this say "ssl"...
I'm tasked with cleaning-up ASA configs. There exist a few certificates that have expired 2 years ago with no adverse effects.I already understand I should make new valid certificates, but honestly there seems no reason for this to be a priority.Am I...
