VPN

I need to create 2 VPN Profiles. 1) Legacy non-MFA, 2) MFA. Admin machines have both. Users only have only MFA. Need to hide Legacy from Group Profile selection, only accessible from Admin profile. This is to be used if MFA breaks for some reason.Wha...

I am in the process of replacing an ASA5506 with a CSF1220CX, however, is there a firmware update available to bridge us to the new device?  We are looking for ASA5506 with FirePOWER Services Release 9.16.4  or 9.14.4.

I am trying to setup a Site-2-Site VPN between Cisco 8000v running IOS Version 17.15.6 AND Cisco ASA Version 9.20(4)10 using Virtual Tunnel Interface (VTI).  It is very straight forward setup, because I have done this so many times so there is no sur...

I've noticed on a Cisco FMC 7.6.6 that under the VPN-Profile->Access Interfaces there is a option to Disable web portal access.  I can't find anything on this when I search for it since all that comes up are the Flexconfig options the many times this...

Dear all,We are migrating our remote-access VPN configuration from ASA to FTD managed by FMC.Our current ASA configuration uses a Management VPN Tunnel in full-tunnel mode, enabled through the AnyConnect custom attribute described here:Configure a Cu...

We have two FTD 1140n 's(version 7.2.5) in an HA being managed by a FMCv (verion 7.2.5.1) We are using AnyConnect version 4.10.08025 for VPN clients. We setup DUO SSO and it is working fine with one of the two vpn connection profiles we use. We get a...

Cisco Secure ClientからFirepowerへ接続した際、Client Profileが自動的にダウンロードされ、クライアントPCへ新しいClient Profile XMLが配信される認識です。以下についてご教示いただけますでしょうか。Client Profile XMLのファイルサイズは、一般的に数KB程度と考えてよいでしょうか。始業時などに多数のユーザが一斉に接続し、Client Profile XMLのダウンロードが発生した場合、Firepower側のCPUやメモリ、通信...

Hello everyone i've been noticing a log lately, i have vpn between my sites, and i guess problem on ISP, I could be wrong of coursehere the logOct 24 13:17:59.456: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=m...

Hello,Basic question about renewing a public RA VPN certificate from the FMC. Since the Certificate Authority Root cert is allready installed, do I still need to include the CA part everytime we want to enroll a new identity certificate? The picture ...

Hello everyone,I would like to share our Remote Access VPN configuration and an unusual issue we are facing. Perhaps someone has experienced a similar case and can share their experience or troubleshooting steps.Our Configuration:Firewall: Cisco Secu...

Can someone just clear my confusion regarding Phase2 and Phase3 of DMVPN. Apart from the summarization thing I couldn't find any better reason of using Phase3. So what are the actual benefits of using Phase3 instead of Phase2?? And also why was there...

Hi Experts ,I am planning to deploy route based vpn via Mic Azure cloud and configure BGP so that we can access client applications .could someone provide some advise/documentations regarding this deployment as doing this for the first time.From our ...

There is currently no support for CrowdStrike Falcon 8.X on Linux:https://www.cisco.com/c/en/us/td/docs/security/ise/ac_compliance_module/support-charts-for-cisco-secure-client-linux-compliance-module-v4-3-5608-0.htmlHowever, both Mac and Windows hav...

Dear Collegaues!I have a Cisco Security Firewall 1220CX Failover configuration. I just installed the v9.22(2)32 software. I have a WebVPN configuration that used to work but now doesn't. The login page appears correctly and login is successful, but I...