hi,We have a firepower 2110 configured in ASA mode with hostscan activated.ASA : 9.13(1)16anyconnect : 4.9.0.4043hostscan : 4.9.03047 All works fine but our problem is more cosmetic : when the first time users connect on asa webpage they fall on Cisc...
Forum Posts
Does anyone know why a query to a DNS server would only show a SOA record and no NS records over Cisco Anyconnect?
I have configured IPSEC VPN between my branch office and HQ and able to reach the branch through HQ LAN and vice versa. Now I have to transport the internet from HQ for users at the Branch office using this IPSEC VPN tunnel but I am not sure how to d...
Resolved! Check IPsec Idle Timeout?
Hi, Currently going through STIG checks.How would I go about checking the idle timeouts on my ipsec connections?In CLI I don't see one configured when I use "show run crypto ipsec"Does that mean a Default of 1 hour is in place? Thanks for your time. ...
I'm looking to see if this is possible to configure. I have an ASA5525 that is the endpoint for our AC users and also a L2L VPN. The remote subnet for the L2L VPN is also reachable from an MPLS connection inside our network. I would like to be able...
Resolved! ASA to FortiGate VTI Drops at P1 rekey
Cisco experts, I have been dealing with this for over 2 months at this point, and I cannot find an answer that seems to check out. I am at a loss, support seems a little slow to respond and I really need to resolve this. So I'll start with my config...
All We have a remote site (c1111) that has a S-2-S vpn to ASA (asa9-12-4-4-smp-k8.bin). topology: Remote site: Cisco 1111 - Internet (vpn) - ASA - Internet The VPN works but access to Internet does not. Remote-Site config crypto isakmp policy 1encr 3...
Resolved! Set AES for ISAKMP?
Hi, Help me out. Im just scratching my head on this one even though I've been here before.I'm STIG-ing an ASA. Where on ASDM can I configure all ISAKMP policies to use AES for IKE encryption?Or what command can I use to check that my configured set h...
Hello;I have the problem that my users need at minimum 2 attempts for a stable VPN connection with any connect.Is there a known issue for this behavior?ASA 5515-version 9.12(4), any connect 4.803052, Thanks + Sorry for my bad English, Greetings, Thom...
Resolved! Command to keep the tunnel up
Hi, I have a site to site vpn from ASA to AWS. I am trying to find commands to keep the tunnel always up. Could you advise? Thanks Loc
Hi,I manage a firewall. It is:FPR-2110Cisco Adaptive Security Appliance Software Version 9.8(4)15 From this FW, we have 10 sites to sites vpn tunnels with our partners. All of them work well.Recently we just set up two more tunnels with a new partner...
Resolved! NAT and interesting Traffic ACL
Hi Folks, I need to configure a VPN tunnel from my CSR in such a way that I will have to PAT all interesting traffic to the outside interface ip. So lets say my Interesting Traffic ACL is src: my-local-subnet to dest: some-hosts-on-the-cust-side. I w...
There's a crypto map that already existed and I edited one of the entries to change the diffie-hillman group and the lifetime. The SA table doesn't show the change. Do I need to delete that entry in the crypto map and then recreate it? Here's the cry...
Is it possible to integrate Duo into a deployment w/ a working LDAP attribute map configuration. Currently it's setup w/ the default map providing no access, and members of group 1 or group 2 get different access. Would like to now add Duo integrat...
Resolved! RA / S2S VPN - Two IP Addresses
On Site A, I have two ISPs, and both of them are unstable, one ISP works sometimes, sometimes the other. 1) How can I create a S2S VPN to Site B using both these IP addresses such that, if one goes down, the others takes over. 2) I want to create Rem...
