Hi, The VPN always show responder, what could be the reason it does not show as initiator ,There are a lot of subnets both remote and local but only the above are listed show cr isakmp sa .why others are not showing I have other remote local sub...
Forum Posts
Hello! My company wants to try out the Cisco AnyConnect and I received the trial activation key from Cisco that would allow us to test AnyConnect for 13 weeks. However, when I enter the command below on ASA activation-key xxxxxxxx xxxxxxxx xxxxxxxx x...
I have an ASA 5555 (9.14(2)15)it has an inside IP of 10.255.90.1 getting BGP routes from the VPN. I'm able to reach this ASA from the remote side of the VPN. I can ping it, SSH to it and connect via ASDM. I cannot however connect to SNMP on the in...
Resolved! Interoperability between ikev1 and ikev2
We have a Cisco ASA5545 running IOS 9.1. ASA currently has over 500 active ikev1 tunnels to different partners. We will like to enable ikev2 on the box while keeping all our ikev1 tunnels active with no service disruption. kindly assist with steps to...
Hi All, I've checked bug reports and tried all newer releases up to 9.16(1) with the same issue. We use a clientless SSL vpn to give external access to an internal website. We are not using smart tunnels. With Firefox, Chrome, and Edge - certain imag...
We have a new DNS server. I have changed the DNS server IP address in the ASA 5512 using ASDM. On the clients ipcofig/all shows the ip addresses of the old DNS servers. Show run for the ASA 5512 I see; dns server-group DefaultDNS name-server 10.42.5....
Hi,I have an older 5510 IOS 9.1 that has a pre-shared secret of Sup£rSecretPassw0rd!!When I paste this into a newer version of code (9.9) it will only show as SuprSecretPassw0rd!!It does not use the £ as a special character.It also has issues with ?I...
Resolved! AnyConnect auto-update fails on FTD
Hi,We're running multiple FTD devices with the same versions of FTD OS and AnyConnect. The only difference is the hardware models. (FTD 2130 and ASA 5508-X)The local VPN XML profile is also the same for all users and contains a list of the different ...
I'm trying to connect using AnyConnect Secure Mobility Client and it gives the error "AnyConnect was not able to establish a connection to the specified secure gateway. Please try connecting again." It also open a second screen error saying VPN estab...
Resolved! FTD Remote Access VPN
Hello, We have cisco FTD 1140. We have configured several outside interfaces: ISP_1, ISP_2, Outside.We are planning to use Outside interface as a Interface for Anyconnect VPN. But for peering with ISPs we use ISP_1 and ISP_2 Interfaces. There are con...
Hello,I'm now looking to see if there is a way to integrate Management VPN Tunnel with FTD (managed by FMC) via FlexConfig? From what I recall, it's not directly supported, but I was told the same about the AC Umbrella Module and I got that installed...
Hello We have defined a dynamic URL on SSL web portal and it is greyed out with Cannot find server or DNS Error.We have internal DNS defined on our firewall so it is not able to lookup on internet.URL is https://XXXXX.com/ (this is hosted on interne...
Resolved! AnyConnect Start Before Logon 4.10.01075
Hello, I'm trying to find an updated document that explains the procedure/steps in order to configure Anyconnect Before Logon on Win 10. The document below seems outdated as the it references some configuration parameters within the .xml file that no...
Hello, I have a scenario I am trying to troubleshoot for a customer. They have remote users that come into a corporate location via Cisco AnyConnect Remote access VPN. They use the outside interface of the ASA to establish the remote access connectio...
Good day,I have setup VPN (IKEv2) between two sites. Once is a Cisco 1921K9 with a security license and version 15.0(1r)M16 IOS, while the other end is a pfSense (some sort of SW I guess).The other end is managed by another party.The tunnel comes up...
