Hi, I have a 5545x with 2500 AnyConnect premium licenses, however when I get to about 990 connected users, additional clients struggle to connect. CPU is around 60% utilisation and the AnyConnect load is 40%. Is there a configuration setting I've mis...
Forum Posts
I have an iMac, running OS X Yosemite 10.10.1.I had permission to install "AnyConnect-MacOsX-3.1.05152-web-deploy-k9.dmg" from Boise State University. I installed cisco's any connect and I was able to connect to Boise State (It was working). My son...
Resolved! whitelist IPs on ASDM cisco ASA 5585
Hello, I'm being asked whether a set of IPs are whitelisted by our firewall. Where can I check that in ASDM?
Hi Everyone, I have a question about using multiple IPsec tunnel.Below is a simple diagram that I think to implement. 1. I have 2 sites connecting over internet. I want to connect them with IPsec tunnel. (not use GRE or VTI tunnel)2. I peer them with...
Resolved! Asa certificate not trusted
Hello Guys, I was hoping you could help me to understand why one user struggle to connect to our vpn. I managed to narrow down that it is related to client ISP and proxy configured in browser but I don't understand logic behind that. Not pc problem b...
Resolved! isakmp error - router 2811
Hi guys,I would like to create a site to site VPN between my ASA and a China remote router.On router, when I typed "crypto isakmp enable" command I know that isakmp is not present.What can I do, where is the problem? License, ios image,...?!error typ...
I have a pair of FirePower 1010 (using the ASA OS load) running in Active/StandbyFailover & failback works fine when triggered with the 'no active failover' and 'failover active' commandsBut Failover is not triggered when link goes down on either the...
Hello All: My platform:Cisco IOS XE Software, Version 16.12.04Cisco IOS Software [Gibraltar], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.12.4, RELEASE SOFTWARE (fc5)cisco ISR4431/K9 (1RU) processor with 1694893K/6147K bytes of memory....
Resolved! Can't Edit/Delete FMC Local DHCP
Hello,I created a local DHCP pool in FMC for Anyconnect. I cannot remove or edit the pool. When I delete the pool and Deploy, it fails and states the following:"FMC >> no strong-encryption-disable FMC >> tunnel-group AnyConnect_MGMT_Tunnel general-at...
I have 2 ISP connection WAN-1 and WAN-2 on my FP1010how can i let the anyconnect VPN users use both ISP connection when they connect to VPN as my original configuration was for one WAN and we just added the 2nd.is Dynamic DNS an option ? but could no...
I am having an issue with Cisco AnyConnect connecting to our ASA Firewall VPN. I have been working with Cisco TAC on the case and they told me I need to update my ASA Version. Is there any documentation on current ASA versions and how to update? Her...
Resolved! Cisco ASA 5510 VPN licenses
Hello, I would like to migrate from ASA 5510 to ASAv30 and I would like to ask is there any possibility to transfer the existing VPN licenses to new ASAv or I have to purchase new ones? Thank you in advance
Hi All, I'm looking for some information on the limitations of anyconnect throughput. The compatibility matrix shows "IPSec VPN Throughput (1024B TCP w/Fastpath)" and "TLS". Granted the throughput would be divided by two shared up and down, addition...
Resolved! Route-based VPN -Who is initiator
Helo guys, Ihave a problem with my route-based VPN on IKEV2. question is why isnt ASA1 allowed create Ipsec tunel from inside interface. When comunication cames from outside IPSEC comes UP. But when is Ipsec down and i initiate traffic from my PC in...
Hi there,We have Site-To-SIte VPN (provisioned on both ASA HA active/standby on each site) between our HQ and one remote branch site. In two weeks time, we will close that branch and commission the ASA HA firewall on that site. My question is there ...
