Community,I can't find any complete examples of configuring AnyConnect on a 2921 using certificate authentication instead of user/pass. Can anyone help provide the correct pieces? We already have AnyConnect configured and working with local username...
Forum Posts
Resolved! Error when running 'no ca-check' command
Interesting error I'm receiving while configuring my ASA to use Azure AD MFA. In Cisco's documentation, I run the following: crypto ca trustpoint AzureAD-AC-SAML revocation-check none no id-usage enrollment terminal no ca-checkHowever, after no ca-ch...
I have been stuck in this issue as our LAN TO LAN Traffic is not passing through the IPSEC Tunnel which is established on both phases between CISCO ASA 5520 AND CISCO 2921 ROUTER. I TRIED THE DEBUGS ON CISCO ASA 5520 SIDE AFTER INITIATING THE INTERES...
I had AnyConnect 4.10.03104 working fine on an Intel Mac running macOS 12. I just migrated to a new Apple Silicon Mac and now AnyConnect won't connect and gives a posture assessment failed error:I can't seem to find any log entries that help identif...
We have IPSec tunnel between 2 sites.Hub Site: Cisco ASA 5515 Remote Site: Cisco FTD 1010 running on ASA image. We recently upgraded our IPSec tunnel from ikev1 to ikev2. The tunnel was working fine for 2 days and suddenly stopped working.Both the si...
Hi I have followed this certain article online on how to configure a S2S VPN from on Prem Cisco Firewall to Azure Environment using Routebased (IKEv2) with VTI. After finishing the setup the S2S VPN is properly working but i cannot find any way on ho...
Resolved! Anyconnect Query
HiI read this on the Cisco Documentation and its a bit confusing, am I understanding this right, if the ike ports ans 443 are configured inbound on our outside interface already then I cant configure anyconnect as it will fail.???????if so whats the ...
Hello, I have VPN tunnel from GCP to CISCO ASR 3945. GCP shows me that tunnel is up and running, however doesn't bypass traffic. In GCP logs it shows me the following: "CHILD_SA vpn_91.151.129.245{43} established with SPIs ec90612b_i e16cd384_o and T...
I've setup SAML through Okta for our Cisco Anyconnect VPN and everything seems to be working perfectly fine aside from the fact that I'm getting "No Internet Access" when connected to the new tunnel group that I've created for this task. I copied the...
Hello, I have successfully implemented Anyconnect in our network, I am using user certificates and ACS for authentication. I face an issue when I try to use computer certificate instead of user certificate for authentication. I should mention that I ...
Resolved! Anyconnect Premium ASA License reduced
We are encountering license issue on one of our firewalls after upgrading ASAv from IOS version 9.12(3)12 to 9.14(2)15 Before upgrade we had VPN License (Anyconnect Premium Peers) for 750 users, which got reduced to 250 users only after upgrade. Befo...
I tried to configure a VPN-IPSEC connection between 02 Cisco ASA 5500'Series in GNS3. But it's didn't work.I send my config files and the architecture snap of my Lab. Can someone help me ?
Hi,A customer have configured his FTD 7.0 with local users and wants to restricts a user to a specific tunnel group.He dont have the possiblility to set up an ISE or NPS server right now, so he need a solution with local users.In the ASA we could use...
Hi,We are trying to configure AnyConnect client4.9 with SSO to onprem ADFS, via the FMC (version 7.01) on a FTD1010 (version 6.6.5). Unfortunately we keep getting errors.When starting to connect with AnyConnect:1. Start AnyConnect client to URL Servi...
Hello - Windows 7 Ultimate 64bit, all updates applied.- Cisco AnyConnect Secure Mobility Client version 3.1.0809 Since installing the above Cisco product I can no longer switch users on my Windows 7 PC. When attempting to do so I get a message sayin...
