VPN

Hi, I have a problem to connect a Juniper Firewall and our Cisco 5515x firewall. I was given a snapshot of the Juniper Firewall config and ask to match it. Below is the Juniper Firewall config. set interface tunnel.2 ip unnumbered interface etherne...

Hi All, I am running ASA 9.3 version and i need some supporting doc to install CA & identity cert in ASA either using ASDM or CLI for configuration. Can anyone share good doc for this. I have existing site-to-site VPN working using IKEV1 and presha...

Hello, good afternoon, I'm doing a demo lab dcloud cisco, just in time to connect a router 2911, is not connected, in addition to the configuration that gives me dcloud to register the router does not accept me the following commands: #crypto isakmp ...

Hi Guys, for some time now I have a problem with a cisco asa firewall: I can connect to the firewall itself just fine trough anyconnect, but I cannot access any internal resources on the remote network. I have tried adding and removing NAT rules asw...

Hi Guys, I am configuring our new ASA 5525x firewalls for Anyconnect Client remote access VPN. For PCI remote access has to be two factor authentication. We have in house PKI server which gives out machine certificate for remote access so I will be u...

Hello Cisco Team, I have a requester when he is using anyconnect, He cannot connect to hotel wifi.if he stop anyconnect service- He is able to see the hotel login page.

Hello, Is it possible to use host names rather than IP addresses to specify the remote tunnel address? All the research I've done on this comes back to configurations where one host is dynamic and the other is static (dynamic host contacts the stati...

Hi, I need to know what would be the impact on HA-synchronization if we have different versions of Cisco Anyconnect clients software images uploaded in Active and standby units? For Eg-The Active unit has 3.0 and Secondary has 3.1. Will HA configura...

Hi, When connected to AnyConnect VPN client successfully and are able to access our internal office network, we are unable to access internet, we have looked at vpn split tunneling, but this remains unresolved as yet. 

We have many VPN tunnels back to our corporate office.  All of these tunnels are very slow (same with our client VPN's).  Our main firewall device at the corporate office is an ASA5510.  We have a 100 Mb/sec Metro Ethernet internet connection here.  ...

Hi, I know the ASA supports OCSP for Certificate Revocation Checking, however I am trying to configure the ASA for OCSP Stapling.  OCSP can overload the the CA web server with requests by end users attempting to validate my certs.  OCSP Stapling allo...