VPN

I've checked on the web, and I can't find anything that tells me what is wrong. IPSEC(crypto_map_check)-3: Checking crypto map outside_map 130: matched.IKEv2-PLAT-5: INVALID PSH HANDLEIKEv2-PLAT-3: attempting to find tunnel group for IP: 67.202.229....

I'm at a lose to figure out why I cannot print to a Local network printer when I'm attached to a Cisco ASA.  I have configured and it's work, Split-tunneling, but for whatever reason, I still cannot print to a network printer on my local network. An...

Hi Folks, please help me to verify if this case is a bug or a "not valid scenario".Scenario:ASA 5520, OS 9.1, SSL VPN with Anyconnect v3.x, static ip address for the client, and RSA token authentication (all the users/pin/passwords are in the RSA ser...

Dear All,Does anyone know if the ASA allows a filter list or similar control to be applied based on the client's public IP address?I haven't stumbled across anything obvious that would do this, but perhaps disabling "sysopt connection permit-vpn" and...

Hello, As im reading new CCNA security book i cant find the difference between remote access vpn and site to site VPN. One is used for one user to securely conect to other site, and other: one lan to other lan. so what's the technical difference? O...

Yesterday I added an access-list entry to our inside access-list on our ASA5520 (which I have done many times before without incident) using the ASDM.  An hour or so later I received reports of RA VPN users suddenly not working properly.   After much...

Hello to everyone :) How are you :). I got some task, I must configure IPSec Site to Site tunnel, between ASA (7.x.x) and Cisco Router 2911 (IOS 15.x). I must configure rouer 2911, with NAT (overload),  We planeed our traffic to NAT in 10.253.191.229...

Hi there According to the following article... ----------------------------- http://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/118086-technote-anyconnect-00.html#anc9 AnyConnect Behavior This section describes how t...

Hello, My issue is a little weird and vague so I will try to be as clear as possible.  I have an ASA 5510 at my main site. I have an ASA 5505 at my remote site.  I have a lan to lan tunnel configured that does work and does pass traffic. I can remote...

We recently upgraded to Anyconnect on our Cisco ASA5555x and installed a wildcard certificate we had on the box.  I have that certificate tied to my primary interface as well as my secondary internet connection interface.  HQ-ASA5555-PRIMARY/pri/act...

Hello all,I can't add svc images using "svc image disk0:/anyconnect-win-3.1.10010-k9.pkg 2".The error message is:ERROR: File write error (check disk space)ERROR: Unable to load SVC image - increase disk space via the 'cache-fs' commandI could not fin...

  ASDM access to 5500 using Java was just a frustrating experience. If you manage only one device you may not notice the pain. But if you are managing multiple devices with some device 'forbidden' to update ASA firmware, it is very frustrating. I spe...

hi, we have a 5510 asa with 9.1(3) firmware, security plus license.i can't configure sha256 in the ipsec proposal, is there any reason for that?the only 2 options are md5 and sha1asa(config-ipsec-proposal)# protocol esp integrity ?ipsec-proposal mode...

I have 2 ASA devices with nearly same VPN config (ASA 5512-X 9.1(4) and ASA 5510 8.4(4)1). To connect user should have certificate installed and a membership in AD group. Certificate defines tunnel-group, after that AD request authorizes his rights t...