cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
430
Views
0
Helpful
0
Replies

FTD managed via FMC and management tunnel and Start Before Logon

podvarka
Level 1
Level 1

Hello,

 

I would like to ask about info whether anybody has functional management tunnel with Start Before Logon at FTD managed via FMC.

 

I migrated configuration from ASA to FTD and one of required functionality is management tunnel. With automatic conenction before user logon. It does not work to me. I have this behaviour :

 

computer is able to connect to old ASA before user logon (for old and new environment is used the same CA),

computer is able to connect to FTD after user logon and management tunnel is stable,

computer connects to FTD before user logon, but connection terminates with reason user requested :

 

22.06.2022 11:28:40 <167>%FTD-7-725017: No certificates received during the handshake with client outside:A.B.C.D/49759 to E.F.G.H/443 for TLSv1.2 session
22.06.2022 11:28:40 <165>%FTD-5-109201: UAUTH: Session=0x43bbc000, User=BNCZBDTPC1234, Assigned IP=10.179.232.162, Succeeded adding entry.
22.06.2022 11:28:40 <165>%FTD-5-109210: UAUTH: Session=0x43bbc000, User=BNCZBDTPC1234, Assigned IP=10.179.232.162, Succeeded removing entry.
22.06.2022 11:28:40 <166>%FTD-6-716002: Group <AC_Mgmt_Tunnel> User <BNCZBDTPC1234> IP <A.B.C.D> WebVPN session terminated: User Requested.
22.06.2022 11:28:40 <164>%FTD-4-113019: Group = AC_Mgmt_Tunnel, Username = BNCZBDTPC1234, IP = A.B.C.D, Session disconnected. Session Type: AnyConnect-Parent, Duration: 0h:00m:02s, Bytes xmt: 16532, Bytes rcv: 0, Reason: User Requested

 

it seems like some right at computer because after logon it works; but in case of using of old ASA it works well

 

Version at FTD and FMC is reccomended one - 7.0.1.

I am using 4.8.03052.

 

 

Thans for any usefull info.

 

Petr

0 Replies 0