Hello community, My case is this (refer to the topology in attachments): I want to perform 3 site-to-site VPN between FTD-DC and FTD- Branch. The problem is we only have 1 public IP address of ISP-1 in FTD-DC. The 1st VPN will work fine using as re...
HelloCisco Secure Client Android app was updated on 16th of February from 5.0.00247 to 5.0.01251. Since then our MDM app on the phone is unable to apply the VPN profile configuration to updated Cisco Secure Client app.MDM of our choice is VMware Work...
Hi,When you have AnyConnect SSL VPN set up on your FirePower ASA device for incoming connections, and a subnet is created for it, where does that actually "live"? Is it on the hardware firewall itself? We had a corporate IT team set it up a while bac...
Hello All, I am trying to deploy policy based tunnel in ftd/fmc running on version 6.7.0.3. Deployment is getting failed with following error "Crypto features are not supported on zone interfaces" Kindly guide me how to solve this issue crypto ikev2 ...
Hello.Goal: To add host 1.1.1.1 to an anyconnect split-tunnel.My below code is not working:---object-group network VENDOR1-GROUPnetwork-object host 1.1.1.1access-list Split_Tunnel extended permit ip object-group VENDOR1-GROUP object VPN-Pool---Questi...
SAML authorization based on the attributes:As per the document https://www.cisco.com/c/en/us/td/docs/security/asa/asa917/asdm717/vpn/asdm-717-vpn-config/vpn-asdm-dap.html#task_bs3_q1v_tsb:~:text=From%20the%20AAA%20Attribute%20Type%20drop%20down%2C%20...
Is there a way to deny a download of newer anyconnect version even if it is pushed from AnyConnect Firewall ? For example I want a Specific user to use a slightly older one , rather than the one what is pushed from VPN Firewall when user connects to...
Hi!I hope I can get some advice regarding ASA configuration.I have ASA 5516-X with asa9-16-3-23-lfbff-k8.SPA. The BGP VPN with IKEV2 version between ASA and AWS is set up using AWS downloaded configuration. The S2S VPN is working properly, the networ...
I connect to the Cisco AnyConnect VPN and it drops the internet connection. Below is the IPConfig and print route outputs from the command line prompt: Microsoft Windows [Version 10.0.22000.556](c) Microsoft Corporation. All rights reserved.C:\WINDOW...
Hi,I am new to this. But i want to know how can i get last 30 days sessions history in cisco ASA5525.Have triedsh vpn-sessiondb sumbut only shows current active sessions.Kindly help!
Hi everybody. I faced a problem which is not standard for me. Some VPN clients on Anyconnect stopped connecting, swearing that the certificate was not correct, while others connect without problems. I installed a self-signed certificate and a certif...
HiWe have a site to site VPN from one of our Firewalls to a 3rd party in azure, should the traffic be natted or is it ok to have nat exemption in place for the servers traversing the VPN.?? Thanks
Hi All, I have a strange issue that I have not seen before. customer has 2 profiles setup on the Firewall with LDAP Auth and these work fine Customer wants to test MFA so we have setup another profile with Radius connection to MFA Server. They can co...
Hello,I upgraded one of my FTDs from 7.0.2 to 7.2.2, and afterwards, when testing VPN, I couldn't get in. After some troubleshooting, I determined that I wasn't receiving an IP address from our internal DHCP server. I setup a local pool on the FTD as...
Hello.GIVEN:172.16.3.0/24(CSRV1000)2.2.2.2===tunnel===1.1.1.1(ASA5525)172.16.8.1/24---172.16.9.1/24 (SERVER1)My L2L tunnel is up. Encrypted packets are evident. Servers can NOT communicate.Tunnel ACL endpoint is 172.16.9.0/24. NAT translates 172.16.8...
