We currently have a Cisco ASA through which we provide the AnyConnect service. Users are first authenticated through Cisco ACS and then through DUO.Currently when the user logs into AnyConnect, they get a window to enter username, password and second...
I read some Cisco docs where I thought starting SBL automatically was possible but now I am not so sure. So I am putting my question out to the Cisco community. Can one of you please satisfy my list for SBL knowledge? Thank you.
What is the difference between AD client and AD Sync ? After installing authentication proxy on a VM or windows machine, how to sync the AD users?? In the DUO documentation page, it's showing to configure AD Client but we can sync the AD users by gi...
Hi Customer purchased two Cisco ASA 5585-X with the default licenses: ASA5500-ENCR-K9 ASA 5500 Strong Encryption Lic ASA5585-SEC-PL ASA 5585-X Security Plus Licen Please could someone provide me with the answers to the following questions: E...
Using Anyconnect, I can connect to my office network via my home PC, but not my home Mac. What gives? This is the message I get when I try connecting thru my mac:The AnyConnect package on the secure gateway could not be located. You may be experienci...
I'm having an issue after logging in. I went through all the config set. When I login I get prompted for username and password but after I confirm it on MS Auth I get Can’t reach this pageMake sure the web address https://abc.domainname.com is correc...
We have an internal Certificate CA, configured to deploy certificates to our workstations so that only PC's with Certs can access our network. We then recently configured our ASA 5516 running Software Version 9.14(1)19 to do a Certificate check first...
Hi,We are currently using the following settings, are these still the best practice, or any updates on this ?Cisco ASAv v9.20ssl server-version tlsv1.2 dtlsv1.2ssl cipher default custom "ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 DHE-R...
Hi all,We are running an ASA 5512-X firewall running firmware version 9.12.4(62) from September 2023. It is end-of-life and will be replaced in the next few months. Until then I have to make do with this firewall.We are using AnyConnect, or in this c...
Hello, I try to authenticate RA VPN users connecting to a FTD device. The radius requests are going over a L2L IPSec tunnel to an ISE server, but no radius packets reach the ISE server and the radius debug on the FTD just show RADIUS_SENT:server res...
Hello,I have a IPSec VPN setup on my ASA which allows the client to reach the inside. I've added a DMZ and I would like to allow VPN access to it as well. I have made the configurations to allow access but it's not working. Can some please let me kno...
Hello everybody,our customer has a Firepower 2130 running ASA-image rel. 9.14(3)18 and it has hundrets of S2S tunnels configured.We are in the process to change all S2S tunnels from IKEv1 to IKEv2 andin the most cases it is not a problem.But this tim...
Hello, I have a hub and spoke topology with IPSEC tunnels (FlexVPN) and the tunnels are working good. The problem is that I have unwanted ikev2 requests every minutes, while the IPSEC tunnel is already established to the hub. When the tunnel is admin...
HejI have a Linux server (no-gui) that we want to connect to Anyconnect. But I am having a bit of a trouble figuring out how to connect to Anyconnect from Linux terminal.From some googling this is what people seem to use the command below, but I get ...
Hi Members,Can anyone help me with configuring my asa with anyconnet vpn so my users can access different subnets in Azure?I've deployed the asa already and interfaces are picking up correct ip's. Im stuck at the routing and the asa configuration.Has...
