So I’ve reached an interesting situation with a client. They are currently running a Cisco ASA 5505 running version 8.2 with no ability to upgrade because of a memory limitation. From what I’ve gathered from on-site techs this device doesn’t support ...
Forum Posts
We have site to site VPN between our cisco ASA 5505 firewall and customer FortiGate firewall. Both firewalls have two internet links. Below are scenario where IPSEC VPN is workingOur ISP1 to Customer ISP1Our ISP1 to Customer ISP2 Below scenario wher...
Hi , I am looking for configuring route based VPN (with BGP) on ASAv in AWS , I also want to NAT by Internal Server's Private IP to some public NAT and advertise that in the BGP prefix. Is this something supported in ASAv in AWS ? Thanks in advance ...
Hi All, Hoping someone can point me in the right direction. So we use Cisco AnyConnect with Azure AD integration for authentication. On a particular VLAN, whereby everything is blocked unless allowed, the authentication window does appear, however re...
Resolved! anyconnect VPN end user traffic
Dear Friends, I am facing a problem, please help me here. I configured anyconnect VPN on ASA 5508-x. ASA inside interface ip address is 10.16.5.20/24, there is route " route inside 10.0.0.0 255.0.0.0 10.16.5.1" that is the SVI of Vlan 5 in core S...
HiWe have a cisco AnyConnect mobility client v4.9 deployed at end user devices now have plan to upgrade/update to latest 4.10 version via Intune. So the issue is when we try to upgrade to latest one end user face disconnectivity that is quite not fea...
Posting this here because it's really starting to irk me... We install an internal CA root certificate on our Macs to cover TLS to our VPN headend and internal resources. This cert was generated using step-ca and is an ECC cert. Nothing else really s...
Resolved! ASA Identity Certificate best practices
Does anyone know what the best practices are for Identity certificates on the cisco ASA. Specifically if I cut a cert for Remote Access VPN is it ok to use that same cert for the management interface?What is Cisco's recommendation here? Thank You
Hi, I have a connection ikev2 with strongswan device and when i create the connection, it shows me this: received TS_UNACCEPTABLE notify, no CHILD_SA built We have the same parameters. Can you help me ?
I'm having a difficult time getting a clients Mac to create a VPN connection to their ISR.It's a pretty basic configuration that worked for a few minutes then suddenly stopped. Goal is to send all traffic from the client to the ISR. Apple has a nice ...
Good day all, when over vpn connecting to my work, i experience drop in my internet throughput. My 100Mbps connection usually gives me around 75Mbps when not over vpn. However over vpn...it fluctuates between15-20Mbps. We do not have any bw control f...
Hello everyone,i have a conflict. Despite the use of IPSec Tunnel in Crypto Map mode, the overhead is not calculated.The IP MTU value for us is 1500.I execute the command:"ping -f -l 1472 10.1.240.155"that is, I have 28 bytes as overhead.20 bytes "ne...
If you don’t use IPV6 on your corporation network, but users have IPV6 through their ISPs, what are the best ways to handle this when using AnyConnect VPN? We currently use split tunnel AnyConnect set to drop all IPV6 traffic. This works fine for mo...
Hello, We have a site-to-site IKEv1 VPN configured between our ASA-5506-X and a Meraki MX64.It's been working fine for a while but the connection started dropping recently at random times. I already opened a ticket with Meraki and they ended up sayin...
Hello, I want to configure an IKEV2 connection between Cisco Router ASR against strongswan. strongswan team is behind a nat (private ip) but cisco is not (has your public ip). What would the configuration be like on my cisco?
