Dear All, We have Sonic Wall Device connected in out Head Office and We have a branch office where we have a cisco 881-K9 router and we are trying to establish the site to site Connection over internet. The Head Office is having a Public static...
Forum Posts
Hi,This may be the wrong forum to ask this.I'm troubleshooting a new Cradlepoint E3000 router on our network. It needs to establish an ipsec vpn to out ASA. I'm able to do that.The issue is network traffic is only flowing to the single subnet the vpn...
Hello, I'm facing a strange issue with our Cisco ASA after building the S2S VPN configuration, there is a warning message ( WARNING: There is no site-to-site VPN license allocated to this context. Please go to Security Context Management to allocat...
Sorry if this question has been posted, probably many times, but I simply can not get my head wrapped around the SSL VPN licensing thing. The documentation uses terminology that doesn't map to the output of SHOW VERSION, at least not that I can see. ...
Hello, I'm working on a POC around posture, and we are using ISE for that. Basically we would like to have a dedicated subnet for non-compliant endpoints, another one for compliant endpoints. Now, when secure client connects the VPN, ISE sends the g...
Hi, I have configured anyconnect vpn, connecting to the primary ISP is working. In the profile xml I have two backup ISP connections in case the primary/secondary is not available. When connecting to the secondary ISP the connection is blocked becaus...
Dear all, I am new to security issues and I have a complicated scenario. I changed the IP addresses so as not to expose the network, but the scenario is complete. I have 2 branches in Brazil that communicate via LAN-to-LAN. Wherever I close the VPN (...
Resolved! VPN Failover not working - C1117 router
Hi all, I've have routers with the following config - crypto map tunnel-vpn 10 ipsec-isakmpset peer xxx.xxx.xxx.xxx defaultset peer zzz.zzz.zzz.zzzset security-association lifetime seconds 28800set transform-set tunnel-vpn-site-link-tsmatch address ...
Hey all,I've somehow successfully got an IPSec tunnel up between 2x 5506-X ASAs in packet tracer (something of a miracle for me, although this is using 3DES at the moment which I need to correct) but as soon as I apply a dynamic NAT rule [nat (inside...
Hi,we have 2 routers connected to each other via an IPSec tunnel. Both routers are on private networks so there is no natting going on.The IPSec tunnel is fine and traffic is flowing between the local networks (crypto map/access lists are fine) via t...
Hi All,I am seeking guidance on process of changing CA.We currently use Firepower firewalls at HQ managed by FMC. It is configured for Remote Access and has been uploaded with both AnyConnect Client Image and AnyConnect VPN Profile.Same Cisco AnyCone...
UPDATE: I am now being told that this IPSEC Tunnel is no longer needed, so I no longer need to convert it to IKEv2.Hello,I have a Cisco ASA that has three IKEv1 tunnels and I need to change one of them to use IKEv2.Attached is the original running-c...
Resolved! VPN Load balancing (Design)
Hi All,We're about to re-design our AnyConnect remote access solution, moving from a pair of FTD 1140 in HA (they are a part of a branch office), to something that can provide more bandwidth to our users. It's a business requirement, so I won't argue...
Hi All,We currently run cisco firepower firewalls (in ASA mode) with anyconnect access for staff, this is all working very well with users connecting with the Cisco Secure Client (ver 5.1). However, we now have a requirement for Cyber Essentials in ...
