Hey there!When i am making my ISAKMP, does the policy number matter what it is? if so, what is so signifigant about it? see example belowcrypto isakmp enable outsidecrypto isakmp identity addresscrypto isakmp policy 10 hash shacrypto isakmp policy 10...
Forum Posts
Hello I am assuming Anyconnect is a separate purchase for Cisco NGFW firewalls. How would I check if there exist current licenses on an FTD 1010 firewall? Also if I need to purchase are these licenses provisioned through the FMC to the FTD 1010 Appli...
A Mac user downloaded AnyConnect Pre-Deployment Package (Mac OS) 4.9 version, but an error occurred. Why is that?
Hello I have a site to site VPN btw an ASA 5545 and Azure. The tunnel was up all the time but suddenly there was no communication. On the ASA side the tunnel was up and I had receive traffic but no transmit From the logs:<164>Dec 11 2020 08:57:40: %A...
Hi,I want to take vpn user activity report on FMC that shows how many user establishes the VPN connection. I do not mean the count of the VPN logins. I mean how many different user establishes VPN connection in a time window. For example; today 100 p...
Hi all, I was going over some logs and found some modules that were loaded that I was very confused about - vpnui.exe loaded module AcroPDFImpl.dll vpnui.exe loaded module AcroPDF.dllthe any connect ui seems to be loading from the right place c:\pro...
Resolved! ASA IKEv1 L2L Tunnel and cisco anyconnect ikev2 vpn dial-in working on the same outside interface
Hi, currently we use ikev1 dial-in with Mac Cisco IPsec client in parallel on the same interface. Because of future win10 client we had/we plan to use Cisco Anyconnect client with ikev2 and certificate. Does this work with the L2L ikev1 tunnel or do ...
Is there an API in the FMC to return the search results from "Analysis-->Users-->ActiveSession" with the search filter "Authentication Type: VPN Authentication" I searched the API-Explorer but didn't see anything.I am basically trying to retrieve All...
Ok so I have 2 Asa5506 and have configured them both for anyconnect vpn sessions. The configs are exactly the same except ip addresses. The issue is that on one of the asa the anyconnect client will only pass traffic while the remote pc is connecte...
Resolved! ACL in VPN site to site
Hi all, how are you? I have a question that I hope you will help me with. I have been doing some tests and I have noticed when I create a VPN site to site in ASA +8.3, and the internal interface does not have the pemit associated with the security le...
Hello, I have a very annoying problem with the VPN Split Tunneling. I've configured exclusions for MS Online Services (and youtube.com :)) and everything looks good except that very often we observe a problem with Outlook Connectivity - mostly sendin...
Hi all, I got the issue when DMVPN and GRE tunnel coexist, then NHRP will have issue.For some reason, I need to create GRE tunnel over IPsec first, then I need to migrate to DMVPN with same IPsec configuration.After I enable DMVPN, then I can not rea...
We are staging a new branch office using an ASA 5508 running Firepower code. Our goal for this site is to tunnel ALL traffic, including traffic destined for the internet through the VPN. Saying this, what does the ACE within the ACP need to look like...
Hi All, We have an ASA and have purchased 100 anyconnect licenses. We are currently using openvpn on our main IP address on port 443 and 1194. we have a /29 from our isp. We would like to transition our users to AnyConnect slowly. It appears to not ...
I need to assign to anyconnect users different profiles. This is done easily with IPSec, with the group policy configured in the client. With anyconnect I have two options:- Allow the user to select the connect profile: The problem here is the user c...
