Hi all,I have failover configured on 2 cisco 4331 vpn routers, the primary router and the secondary router are configured with different internet circuits. When testing the fail over, the secondary router takes over with no problem and everything can...
Forum Posts
Hi Everyone! I am trying to access ASDM/HTTPS server from a remote location using IPSec VPN Client. IP address of Management interface is 192.168.0.1. When i connect with ASA using VPN, the client IP address is from the pool 192.168.0.2-192.168.0.20....
Hello,I have a task as below, but encountered an issue. Please help me.Task: Anyconnect user uses two factor authentication, Duo and ISE internal accountScenario: AAA on ASA points to Duo Proxy server and Duo Proxy server authenticates to ISE radius ...
Resolved! ASA 5505 IPSEC site to site VPN issue
HiMy company uses an ASA 5505 firewall to create IPSEC VPN tunnel with another partner, the other patner company uses Huawei Firewall, the vpn tunnel works and the connection done, but some times the connection interrupted and there is no connectivi...
Hello for everybody. What is difference between server list and backup servers in anyconnect profile editor for windows. For example, in server list i can add ip address or A record of my anyconnect server. If i understand correctlt, int his particu...
Hello, our company security was complaining about those open ports (139,445) so I tried to remove them from our standard split tunnel access-list, but nmap still finds them open: --Starting Nmap 7.60 ( https://nmap.org ) at 2020-09-17 14:15 CESTNmap ...
Cisco routers with point-to-point IPSec VPN Options (not multipoint):RSA-Signatures with IKEv1 – manual YikesPSK with IKEv1 or IKEv2 – Hacked and brokenPKI with IKEv1 – Hacked and brokenPKI with IKEv2 - When setting up routers with point-to-point IP...
Hello All, We have three Cisco 5545 ASA firewall configure for SSL VPN & this three firewall are in VPN load balancer. for inside & Outside we have separate switch . also we have one vrf interconnect to VPN firewall(different switch for vrf).recently...
Hello, I need to establish a statefull failover link between 2 ASA in two seperate rooms. but I have to go through a firewall for this link.I know that the easiest way to do so is to have a layer 2 link. but this is a very particular situation where ...
Hi,We're getting a Security Warning when we try to login with our AnyConnect clients to vpn.domain.com.The warning shows the IP address of vpn.domain.com instead of the domain-name? We have a valid DigiCert wildcard certificate for *.domain.com insta...
I have an issue with an IKEv2 route-based tunnel from an ASA Version 9.8(4)20 to Azure. On the Azure end, we have two address spaces defined for our local network. On the ASA end, we send all traffic destined for our one network in Azure through the ...
Hello, I have a question for everyone. I have configured trusted network detection in a non-production environment, and basically it is working as advertised. I have found though, that when I move from an 'untrusted' network to a 'trusted' network th...
I just read over the release notes for the new 9.7.1 release and stumbled upon this: Virtual Tunnel Interface (VTI) support for ASA VPN module The ASA VPN module is enhanced with a new logical interface called Virtual Tunnel Interface (VTI), used ...
Resolved! ASA VPN Pool DHCP
Good afternoon people.I am configuring a VPN remote access in ASAv, in the DHCP pool configuration I am trying to place a pool / 16 however it presents the error that it does not support. What would be the best practice for configuring DHCP pool in ...
Hi, AWS require 2 peers to be setup for redundancy, is this not possible to achieve with ikev2? Should Phase 1 and Phase 2 encryption/hashing/DF Group match? Seeing no return pkts decaps=0 so wonder if this has to do with Phase 1 picker lower securit...
