I know that I can create a control plane ACL to limit the addresses to U.S and Europe, but anyone ever do something like this? How do you build the list of addresses?
Forum Posts
We have a pair of ASA5512's with active failover. recently our Anyconnect VPN licence expired, we have received the new licence and applied. But we now have an error when connecting via client where it says incorrect certificate and seems to be tr...
I've configured a remote SSL VPN on Cisco ASA (9.2).The local network is 192.168.1.0/24. The server I want to reach is 192.168.1.5. The VPN IP pools are on 192.168.40.0/24 network.On the remote site, I've one ADSL connection with internal IP 192.168....
Hello, We recently had a user bring in a Windows XP laptop that they had been using to connect to our VPN, using the AnyConnect 3.1 client. After we migrated from a older ASA, to an ASA running FTD 6.2.3.2, that client is no longer able to connec...
Resolved! Question about ASDM through VPN
Hello againI configured ASA 5510 management through the inside interface. When I am in the office connected to the LAN I have no problem running ASDM. However, when I'm outside the office and I connect through the Cisco SSL VPN Service I can't mana...
Cisco AnyConnect 4.5 Mac OS 10.13.6 not accepting user credentials! I installed Cisco AnyConnect on a MacBook Pro, OS High Sierra version 10.13.6 for one of our customers. I attempt to log in as the user to VPN and the login prompt just fla...
A single user is receiving the Anyconnect error "no valid certificates available for authentication" sporadically. The error occurs sporadically but occurs frequent enough to cause some headaches. I have observed a successful authentication, discon...
Hello,After reading many other discussions on this topic, it appears with the correct IOS and NAT-T enabled router, you can bring up DMVPN behind a NAT device.I have attempted to complete this task, but I cannot even get phase 1 going for the DMVPN. ...
I installed Cisco AnyConnect on a MacBook Pro, OS High Sierra version 10.13.6 for one of our customers. I attempt to log in as the user to VPN and the login prompt just flash then comes right back asking for his password again? User puts his passwor...
I am looking to enable Reverse Route Injection for our AnyConnect SSL clients and clear up a few static IP routes in our environment as we expand and have routing protocols take over. I guess to start at, I am not clear if RRI is supported for Any...
Hello everyone, I am stuck on a issue. I have DMVPN environment and I am in the process of changing domains and thus new certs and cert servers. I set up my Web server as my SCEP request handler (this is a Microsoft CA subordinate that han...
Hi There, We are using ASDM Version 7.9(2)152. There is a new update for Anyconnect Client images so, we have downloaded pkg files for all the os platforms but, when we try to upload the files it throws the error saying not a valid cisco anyconnect c...
On my Windows 10 (virtual machine running on my Mac) it always says, "Could not connect to server. Please verify Internet connectivity and server address." I have users running standalone Windows 10 also have the same problem. But the Anyconnect i...
Resolved! AnyConnect SSO using Kerberos
Hi there, Is it possible to perform SSO on mobile devices running AnyConnect and Per-App VPN, but not joined to the domain? I need to migrate an existing environment using F5 Edge Client that has this functionality working but can't see any refere...
Resolved! tunnel between 1841 an Palo Alto 3020
I have a tunnel built out and peering between a Palo Alto 3020 and a Cisco 1841. The Palo can ping the inside interface of the router, via the tunnel, but the router can not ping anything but the outside interface of the Palo. How do I add a route to...
