Hi all, only a short question befor I open a TAC case, in case I absolut missunderstood something.We wanted to move from our old ASA which is holding AnyConnect and Site2Site VPN to our Firepower managed by FMC. We switched anyconnect (or no secure c...
Forum Posts
Hi all,We have a IPSec requirement to peer with a DynDNS FQDN on a FTD 4110 (6.4). Is this at all possible to do?I see there is a Dynamic option where you specify the peer IP address, but I cannot find much information on it.RegardsJacques du Plessis
Hello, Mayo Clinic Patient Portal LoginI have data that I need to get through API but I do not have access to do it. I found some packages for nordvpn and expressvpn, but nothing which allows you to execute via command line from OSX. I don't know ...
We currently use DUO for MFA via AnyConnect and works great. However, we are trying to unify across the board via OKTA. We configured an OKTA Radius agent and added it to a test AnyConnect profile and testing discovered that the only thing that seem...
Hi Everyone,Does Cisco FTD Products (2100 series) support clientless SSL VPN Portal without anyconnect agent on clients?Tnx in advance
From June 2022 IE11 will be end of support from Microsoft. The IE11 browser seems to be the only client which will support Smart Tunnels (specifically the RDP applet), it seems that Chrome and Firefox removed plugin support some time ago. Chrome 45, ...
Hello Sec Gurus, I have an ASA that handles a lot of VPN L2L terminations, and recently we noticed that we started facing the duplicate remote subnets issues, and sometimes customers don't know how to do advanced NAT from his end, I know I can do Twi...
Hello.DMVPN spoke int tu10 is stuck in NHRP state. Troubleshooting has been fruitless.Suspect is the VRF design.Tunnel 10 is on vrf "RED". No routing protocol is run on this VRF, it only has a very few static routes, with a default route pointing to ...
We are upgrading from a 5545X to a FP2140.On the 5545X we have dynamic vpn tunnels with Meraki v3's. These are used with remote users so the IP needs to be dynamic as it changes.I configured one tunnel with a dynamic remote ip on the fp2140 without ...
Dear VPN guru,i got this issue when trying to launch the ERA 2 connection.After inserting the credentials, the policy scan will load 1% and then stop with the following error. Checked the Anyconnect manual, and it says that:Untrusted Policy Server Ca...
Hello, I am trying to see if there is a way to run a login script after signing into Anyconnect? I see this thread but it applies to the ASDM/ASA:https://community.cisco.com/t5/vpn/run-local-file-after-anyconnect-establishes-a-connection/td-p/2766367...
Hi guys,In these days i saw in my cisco that it shows me a message with this error:%CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddrThis ipsec configuration was working without any problem but for a few days it does...
We are about to depoly Cisco Secure Client Version 5.0.03076 with all three modules "AnyConnect VPN", "Start before login" and "Network access manager". I'm experiencing the problem that when connecting with VPN before Windows login and then logging ...
Hi,Is it possible to setup site-to-site VPN which will allow 2 intercaes in each location to communicate ?I'm trying to implement QoS for IPPhones and I found that the easiest way is to create VLANs - this way it is easier to create bandwith limits o...
We are trying to troubleshoot a very low traffic IPSEC site-to-site link between an ASA and a Sophos XG which uses strongSwan. Traffic allowed across the tunnel is 443 only, and requests from the Sophos to the ASA are very infrequent - maybe 5 a we...
