I am attempting to set up a dynamic access policy on ASA to check if a specific antivirus software is installed. We use "Sophos Intercept X" for endpoint security. I have not been successful yet in configuring a policy that checks if that specific an...
Forum Posts
Hello everyone i have vpn connectivity between my sites everything look good yesterday i checked my tunnel and tunnel (protocol) in down state i start troubleshooting i found this log%CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid...
My posture condition for windows device are as follows:- Windows Patch min 10.X Windows Fw - remediation if not enable enable it VPN check. My windows system is running on version 11 24H2 Facing isssue as follows:- Windows patch check failed Window...
Hello, We are experiencing an issue with Cisco AnyConnect Secure Mobility Client on Windows 11 that started recently. When the service “Cisco AnyConnect Secure Mobility Agent (vpnagent)” is set to Manual, the VPN client fails to start and displays ...
Hi, I am looking for a guide on how to get certificate working with Cisco C1111-4P (code 17.12.5a) I am trying to get ECDSA certificates working to authenticate over the FlexVPN instead of PSK I think my first question is, is it supported and what si...
We have moved portions of our machines to CSC 5.1.5.65 which is the last update needed in order for auto-updates to work. The issue I am experiencing is that when CSC updates it pops up a notification window that does not go away until it finishes d...
I have used openssl to create a CSR and used digicert to create the certificate, intermediate and root. I have the signed certificate ready to install on the FMC - What is the correct order to configure the certificate on the FMC ver 7.6.0 - Is the o...
A customer has an MPLS network with BGP routing that is used as primary communication between their HQ and 10 smaller remote sites. As backup they are using VPN tunnels between a FTD firewall at the HQ and C1111 IOS XE routers at the remote sites. Th...
Does Cisco ASA support FQDN based split-tunnel for Ubuntu machines? Will Dynamic split tunneling functionality work with Ubuntu?
ASA5555-X is going EOL this fall, so we have to upgrade. Looking at running FPR-1140 with ASA to maintain easy migration of 70+ VPN tunnels. Also using AnyConnect 4.9 client currently. I haven't found anything saying i wouldn't continue to be able to...
HI We have an ASA 5525 firewall and it's currently being attacked by brute force VPN attempts. This is affecting our NPS and causing it to crash. The outside interface has a simple deny any any rule which is blocking everything however the firewall s...
The Cisco will not implement because of VPN Tunnel being used by other user does not apply to on premise Desktops with VPN disabled which is the most likely place to use fast user switching. If this is still an issue then a standalone Umbrella client...
I have configured a new Service Access list defining which countries are Allowed (and with a default of Block) and applied it within the RAVPN config. However, I am still seeing auth requests of malcious attempts to connect from countries that should...
Hello,We have the following issue. Two-factor authentication (2FA) via Microsoft Authenticator is configured on a Cisco ASA. The tunnel group on the ASA is connected to Cisco ISE, which acts as a RADIUS proxy.In the condition, the Cisco ASA's IP addr...
Hi Community Members.,I am not certain what license that would be needed to achieve SSL and Anyconnect vpn for remote workers using ISR4331-SEC/K9 or any other higher model..I would need your advice on the Hardware and requisite licenses to be proc...
