So,I have OSPF running on the overlay on 192.168.100.x/24.I have static defaults pointing to ISP for underlay reachability.Hub is .1,Spoke 1 is .2 and Spoke 2 is .3. I have loopbacks 10.3.3.1/24 and 10.4.4.1/24 respectively on Spoke 1 and Spoke 2,whi...
Dear teamI got this report from vulnerability assesment team, on my VPN portalObsolete CBC Ciphers AES, ARIA etc. offered Any advice to fix issue please Thank you
Hi All ,I try to disable tunnel-group DefaultWEBVPNGroup but still not found . My scenario is I have 2 tunnel-group URL : https://x.x.x.x/group-1URL : https://x.x.x.x/group-2Incase if client connect https://x.x.x.x without / name of group he will ...
I am trying to use DAP to evaluate that the endpoint have ANY AV and ANY firewall enabled. I have two separate functions that i believe i need to combine into a single LUA function so that i can use a single DAP record as both criteria must be hit. ...
Hi All ,I have a Ipsec tunnel build between source to destination.where i am seeing packet drop issue from src machine to dest server.at same time i can see my pubilc internet reachability from internet router is fine.this issue is temporory getting...
After an upgrade from AnyConnect 4.10.06079 to 4.10.07061 we have this error on our clients "The VPN connection was terminated due to loss of the network interface. A new connection is necessary, which requires re-authentication."We use Gina to log i...
Hello,in the past we distributed two files via ASA/AnyConnect to our clients.profiles1.xml and profile2.xmlBoth contain the same profile Names (HostName), but different HostAddresses.(Don't ask why)Now we would like to change the HostNames (display n...
Hi,I have a central location (Location-2) which connects to the two site to site VPN Locations (Location-1 & Location-3). Traffic flows between the Location-2 and Location-1 and also between Location-2 and Location-3. Now, the requirement is to esatb...
I need to pass traffic on port 80 from outside through my ASA to a temporary webserver I've got setup. I've got anyconnect running using SSL, and only have one static IP. I'm trying to figure out how to get traffic on port 80 through to the webserv...
Hello everyone, Long time reader, first time requester. As the title states I am having issues getting a S2S IKEv1 tunnel to establish between my ASA 5516-x and our AWS VPC. I followed a guide to do this, and downloaded the config straight from AWS t...
I feel like this was a Windows 11 problem a year or so ago, but new laptop, new VPN connection being created. I had thought things patched up since then, but maybe I'm just missing a specific Windows update KB that causes this problem. My older win...
Hi! I have a VPN L2TP Server, and more than 10 users have been created. When I connect more than one user to the VPN, they get the same IP and drop the connection. Another would have to fix this VPN inside Cisco RV340.
I can't seem to find clear instructions for installing a RENEWED ssl certificate on an ASA. All of the instructions I see talk about generating the CSR from the ASA but what about when a customer renews their SSL cert through a popular vendor such a...
Hi,I have the following setup and cannot ping from the Cisco ASA to any external IPs. I have a Firewall connected to Internet and my Cisco ASA outside interface to the Firewall via a transfer network. I do nat on the Firewall to allow an external pub...
Hello,Cant find the answer anywhere. I have one ASR 1001 in one location. I have no problem connecting a Fortigate to it and creating a Site to Site VPN.I have one ASR acting as HUB.ther ASR 1001 connecting to the same ASR but can't get the tunnel up...
