Hi, currently we use ikev1 dial-in with Mac Cisco IPsec client in parallel on the same interface. Because of future win10 client we had/we plan to use Cisco Anyconnect client with ikev2 and certificate. Does this work with the L2L ikev1 tunnel or do ...
Is there an API in the FMC to return the search results from "Analysis-->Users-->ActiveSession" with the search filter "Authentication Type: VPN Authentication" I searched the API-Explorer but didn't see anything.I am basically trying to retrieve All...
Ok so I have 2 Asa5506 and have configured them both for anyconnect vpn sessions. The configs are exactly the same except ip addresses. The issue is that on one of the asa the anyconnect client will only pass traffic while the remote pc is connecte...
Hi all, how are you? I have a question that I hope you will help me with. I have been doing some tests and I have noticed when I create a VPN site to site in ASA +8.3, and the internal interface does not have the pemit associated with the security le...
Hello, I have a very annoying problem with the VPN Split Tunneling. I've configured exclusions for MS Online Services (and youtube.com :)) and everything looks good except that very often we observe a problem with Outlook Connectivity - mostly sendin...
Hi all, I got the issue when DMVPN and GRE tunnel coexist, then NHRP will have issue.For some reason, I need to create GRE tunnel over IPsec first, then I need to migrate to DMVPN with same IPsec configuration.After I enable DMVPN, then I can not rea...
We are staging a new branch office using an ASA 5508 running Firepower code. Our goal for this site is to tunnel ALL traffic, including traffic destined for the internet through the VPN. Saying this, what does the ACE within the ACP need to look like...
Hi All, We have an ASA and have purchased 100 anyconnect licenses. We are currently using openvpn on our main IP address on port 443 and 1194. we have a /29 from our isp. We would like to transition our users to AnyConnect slowly. It appears to not ...
I need to assign to anyconnect users different profiles. This is done easily with IPSec, with the group policy configured in the client. With anyconnect I have two options:- Allow the user to select the connect profile: The problem here is the user c...
Hello, I'm trying to complete the newly published VPN Gateway STIG on a freshly deployed remote access VPN deployment - most items can be closed via specific references to actual system settings... A few of the remaining items are more system build ...
Hello,I'm trying to setup an IPsec VPN on a ISR4221/K9 V03. The "show crypto isakmp" and "crypto isakmp" commands are not available.I'm enabled licenses securityk9_npe appxk9 it did'n help. What I need download, buy or doing for enable IPsec on this...
Hello everyone, we are currently facing issues updating one of our CSR1000V from IOS XE 16.03 Denali to 16.09 Fuji, the problem is two-fold: - configuration 'crypto map MAPNAME isakmp authorization list GROUP-LIST' doesn't seem to be supported anymor...
Dears kindly , we have problem in dmvpn tunnel which not work frequently , it work only after shutdown , no shutdown tunnel below is dmvpn configuration spoke (ISR4321/K9)-----------------------Cisco IOS XE Software, Version 16.09.02Cisco IOS Softwa...
This is a new setup. Site A: Cisco C891F router uses 192.168.0.0/16Site B: SonicWALL uses 10.10.0.0/16 Both the Cisco router and SonicWALL show VPN tunnel is up. But neither side can ping each others' LAN. SonicWALL packet capture shows packet desti...
Hi, Can anyone give me some insight on how I can test or check the configuration for this stig check? Thanks in advance for any advise! "Verify the remote access VPN Gateway uses a digital signature generated using FIPS-validated algorithms and an ap...
