I would like to characterize the machines that are currently attaching to AnyConnect. Is there any way on the ASA that I can see what OS a user is using? Or if they have AV or Malware protection? Or what model of hardware?
Hello, We have a VPN from the UK to Holland, we manage the UK side on a Cisco router, I don't know what they use in Holland. Phase 1 and 2 work, but we can only initiate from the UK side. So we had a report from a Dutch user who couldn't access a se...
I need some assistance in understanding how clientless SSL VPN bookmarks work. My understanding is in order to add an https link it has to reside on an internal web server. My scenario is a https bookmark has been created on the Clientless SSL VPN a...
I have a Cisco ASA running 7.14. I have 2 WAN interfaces and a separate SSL vpn pointed to each WAN address. I have purchased 2 trusted certs and installed them. Is there a way to assign the correct cert to each AnyConnect profile? vpn.<company.com>v...
Hi, I have an issue with Cisco AnyConnect Secure Mobility Client version 4.10.00093 on Windows 10.After entering the password and clicking the "Accept button" the welcome message for the VPN displays.Two seconds later a message box shows, displaying ...
Hi Team,In my org, we are using Anyconnect IPsec-IKEv2 for all remote users and now we have to plan to have this integrated with DUO or Azure AD. So wanted to check whether with IKEv2, will it work or should I need to enable SSL as well ?
We have a small group of people in a department that doesn't have AD, so they are authenticating against an RA VPN with accounts local to the FTD. Is there any way for the users to set their own passwords once the initial configuration is done? Thank...
Hello Guys seeking for your help and inputs. We have an issue with anyconnect failing to connect when using yubico token as second factor and we are getting error "The client agent has encountered an error.". We found a solution on below forum which ...
Hello, I tried to migrate a VPN we have that originally went from a remote site (not managed by us) to our WAN provider (not managed by us) and instead from this remote site to us direct as we are removing our WAN provider. So I built the VPN using a...
Hi Team, As titles, just curious, what's the signficance of "pkts not compressed" on "show crypto ipsec sa" , this counters seems to be same as pkts encaps in some cases. #pkts encaps: 11111, #pkts encrypt: 11111, #pkts digest: 11111 #pkts...
Hello there,I have the below basic network diagram. We have two ASA firewalls, both newer 5500 models. One has Firepower Module and is used for our internet browsing for the company. The other is simply used as an AnyConnect VPN Concentrator without ...
I have a couple of 5545x's running in a HA pair, were running on 9.1.5. The environment overview, we are running a bunch of point to point vpn's into the firewalls. The routes come into the routing table as a static with an AD of 1. As most people...
都是Firepower 1010，因為沒有公網ip，直接用VG模擬環境，只在VG上設置IP。Lab1_FW 中的當前設置（Lab2 設置也一樣，但順序相反）IKE策略由系統預設還有ACL部分沒有show ipsec sa...
Greetings! I´m trying to configure this lab and PC1 can ping Server, but for PC0 to ping server I had to configure a static route (ip route 10.0.0.0 255.0.0.0 192.168.0.5), but not on PC1 (All routers have EIGRP configured.)I can´t really understan...
We're currently making our network more resilient. Our current setup is Single ASA with Single ISP. Our plan ahead and currently testing is utilizing 2 ASA configure FPR2000 series firewalls with port channel redundancy connected to a stacked C9200's...
