Dear all,I have an issue related to AnyConnect VPN, & looking forward to the troubleshoot steps.>Some users experience the following error, and this happens frequently >I looked at the user log, this happened because our VPN server (ASA) terminated t...
Hello Team,Is it possible to migrate IPsec configurations from one FTD to another being managed by same FMC but sit on different DCs?If yes, what tool can I use?Thanks in advance.
Hi all,For IKEv1, I use 1.3.6.1.4.1.9.9.171.1.2.3.1.35, however, it does not include IKEv2 tunnel of course.I only found one tread here mention "1.3.6.1.4.1.9.9.392", it seems working for ASA.But it does not work on Cisco CSR, I run "snmpwalk", got ...
Hi all, I want to ask the community if my understanding is correct. Waht we have: 1. Centrale ASA with static Public-IP.IP-Address in LAN - 10.0.10.0/24 2. Remote FW-1 with dynamic Public-IP.IP-Address in LAN - 10.0.20.0/24ISAKMP-ID : fw-id-1PSK: xxx...
Hi al,I rebuilt a asa5506 on 9.14 but I can't seem to access the internal network over secure connect.Split tunnel and nat is configure, I see the hit counts and it is getting dropped by acl. Any thoughts?hs1rt1# sho vpn-sessiondb anyconnectSession T...
Hello About the vulnerability CVE-2024-20337, where cisco recommends upgrading to 5.1.2.42 to fix the vulnerability, but does this also apply to "Sucure Client UI"? Where I'm only have 5.1.0.1047 version- if so, where can I find the latest version fo...
I've been battling this thing for 6 hours now and I can't come up with a solution - probably because there isn't one. But I thought I'd ask here before I give up. The issue with captive portals has been plagueing us for a while now because all our us...
Hello,Is there a limit in a VPN Ipsec throughput? Somebody told me that there is a limit in 1.3 gbps in a VPN IPsec. Is that true?I found this link in which it is implicit that limit 1.3 gbpshttps://aws.amazon.com/ko/blogs/networking-and-content-deli...
Hello All,I have a DMVPN phase 3 setup between a hub router and two spoke routers in a lab enviornment. below is my configrationHUB SPOKE1 SPOKE 2 tunnels come up on the hub just fine via the above configs as seen belowat this point that's when thing...
Is there a way to cache user login credentials when using Azure MFA with AnyConnect?We are just starting our journey with AnyConnect and have it working fine with Azure MFA. However each time the user connects to VPN, they have to re-enter their cre...
Hi, I'd like to ask, could we use one Crypto ipsec profile into two different tunnels with the Shared keyword where source WAN interface is same? or we must need two different profile for two different Tunnels ? e.g. crypto ikev2 keyring VPN-Rpeer A...
I'm trying to connect to a corporate SSL VPN on Windows 10, upon adding the VPN gateway and then hitting connect it goes to the sign-in dialog box but also returns a "certificate validation" failure error, then I choose the group and try to connect t...
Hello, I have an ASA 9.14(3)13, with a connection profile using MFA with Azure. For this connection we have configured the SSO server SAML with the Sign in URL, Sign Out URL, Base URL, Identity Provider Certificate and Service Provider Certificate. ...
Hello,Can I view logs in the FTD from a period in the recent past that has the information for why a VPN tunnel went down?If I were troubleshooting the connection live, I would enable debugging with the following:debug crypto condition peer "IP"debug...
Good evening, is there a way to create a policy in ISE where it automatically adds the source IP address of repeat failed authentication attempts to a block list? If someone was running a dictionary attack against one of our VPN gateways (ASA), I w...
