Hello,i have a FTD 1010 Device. Anyconnect is configured and the users are able to connect. But the clients reconnect every 4 Minutes. (MTU is already reduced to 1300, udp Port 443 is not blocked, DTLS should work) I see following in the Logs every t...
Hi, Looking at the tunnel below I noticed I have 6 SPIs, 3 incoming and 3 outgoing. Although the tunnel is encrypting traffic both ways with no issues. I'm assuming I should only see 2 SPIs, one for each direction, so I'm curious why am seeing multip...
Hello everybody,I upgraded the ASA5555 OS from 9.14(3)15 to 9.14(4)23.The customer called me because the users that use stillthe old Cisco native VPN-client cannot login anymore.They use still the ACS as RADIUS server. I want to know until what ASA O...
Hi!Could not find a thread regarding my particular issue and hope someone here can explain it.On W10, if I provide a VpnMgmtTunProfile.xml for the clients but for any reason, let's say the client doesn't have a valid certificate or it might has been ...
Hi,I have AnyConnect 3.0.4235 installed on my Mac (OS X Mountain Lion), and my company uses .xml profile files so that the list of sites to connect to is autopopulated when you run the client.I know where they go on Windows boxes, but have never done...
Hellow everyone,I have a HQ network with FPR 9k connected Site-to-Site VPN to branch office ASA5506.Currently, the protected VLAN2010 is a single VLAN and I wanted to add a second VLAN to this VPN tunnel.Upon adding the new VLAN2020, the branch no mo...
Hi, I have an issue with SAML authentication method.If I tried to enter via VPN into my company I see this message: May 09 15:51:53 [Lasso] func=xmlSecOpenSSLEvpSignatureVerify:file=/local/jenkins_engci_sjc/workspace/team_SSP/fxplatform/Builds/releas...
ASA deploys anyconnect VPN and authenticates the user through windows AD. When the password expires, the user does not prompt the user to change the password, but directly prompts the user to authenticate the user. This works on acs. How do I deal wi...
I know that it will be detected by the Trust DNS server, however, if we are outside the office and change the DNS IP address to the Trust DNS server, Anyconnect will start connecting the VPN or not?
Slowly share the screen through Microsoft Teams for 6 - 10 seconds when we are using Full Tunnel VPN on ASA
Hello,Hope you guys are well.How can one monitor, get alerts on IPsec VPN running on FTD managed by FMC? on PRTG.Your inputs will be highly appreciated.Thank you.
Hello Family,Hope you are well.Is it possible to migrate IPsec Configs between two FTDs in different sites, managed by the same FMC.If yes, kindly provide an insight on how to achieve it.Thank you
Good day!I've been trying to refresh and practicing site to site configuration but i have some issues which i still cannot ping Host B from Host Abelow is my configuration from Router4 to R5-2, by the way in between R4 to R5-2 is connected thru OSPFR...
Kind of an odd question but hoping someone can help. Getting ready to upgrade my 5506-X to 9.16, and as part of that I want to test performance with updated algorithms while also not disrupting my existing users. Unfortunately I don't have a lab ma...
Hello,When I want to connect to a Cisco AnyConnect server, then it shows me the Untrusted Server Blocked! an error message and I must disable the Block connections to untrusted servers option. What is the problem? Does the server I connect to not hav...
