About Sean Oskar

Sean Oskar · 02-09-2015

Hello, Is there a way to prompt the user to continue the session shortly before it hits the vpn-session-timeout value (ASA). Thanks,Sean

Sean Oskar · 07-12-2011

Hello,On an ASA5520 v7.2 I can only seem to authenticate to the console when using telnet and not ssh. I can connect using both methods, but just have trouble authenticating with ssh. Here are relevent lines related to the issue:username user1 passwo...

Sean Oskar · 07-04-2011

Hello,Is there any aaa command(s) to lock-out source IPs after a given number of attempts? I'd like to make it so specific users do not get locked out universally. (2811 v12.3 (8) T5)Or would I need an IPS for this?Thanks for any info,Sean

Sean Oskar · 08-20-2015

Why not create a separate group for the user and apply the policy to that group?

Sean Oskar · 08-20-2015

Hi Rolando, On an ASA, you can combine protocols and source/destination-based services in a service-based object-group. Your example would look like this: object-group service PORT_LIST1 service-object tcp destination range 21 22 service-object t...

Thanks for the info Marcin. · 02-13-2015

Thanks for the info Marcin. Edit: I found there was actually an alerting feature added, vpn-session-timeout alert-interval: http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/intro_intro.html#wp1326128

Sean Oskar · 02-09-2015

With your existing global statements, my suggestion should fulfill the requirement. Here's some further info: http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/nat_overview.html#wp1088419

Sean Oskar · 02-09-2015

Try this:access-list NET1-104 extended permit ip 172.30.1.0 255.255.255.0 10.31.255.128 255.255.255.128access-list NET16-105 extended permit ip 172.30.16.0 255.255.255.0 10.31.255.128 255.255.255.128access-list NET3-108 extended permit ip 172.30.3.0 ...

Member Since	‎07-04-2011 01:06 PM
Date Last Visited	‎09-20-2020 09:27 AM
Posts	11
Total Helpful Votes Received	5

User Statistics

User Activity

AC VPN: vpn-session-timeout and User Prompt

Can only authenticate with telnet on ASA

Use AAA to lock out source IP?

Why not create a separate

Hi Rolando,

Thanks for the info Marcin.

With your existing global

Try this:access-list NET1-104