The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

3
votes
0answers
105 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
2
votes
0answers
42 views

How to allow vpn users to access only specific servers?

Currently we have an ASA with an IP pool to allow an outside contractor to remotely connect and access our network. What we would like to do is limit what they can get to once they are connected. I ...
2
votes
0answers
147 views

Strongswan VPN Established but no Packets Routed

I'm setting up a VPN using strongSwan between a Linux instance on an Amazon EC2 instance and a remote network via its Cisco concentrator. I need to route packets from the Linux instance itself a ...
2
votes
0answers
81 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
2
votes
0answers
246 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
2
votes
0answers
303 views

ASA Site to Site VPN Version 8.4 Natting Same Subnets

My site and client site has same Lan IP range. Both using ASA version 8.4 Site A : 192.168.18.0 Site B : 192.168.18.0 Please tell me how to do Natting on 8.4 Any help would be highly appreciated. ...
2
votes
0answers
2k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
2
votes
0answers
3k views

cisco asa NAT to site-to-site VPN

I'm trying to NAT an external address to an internal address which is not local, but on a remote end of a site-to-site VPN connection. Is this possible? Log says Routing failed to locate next hop for ...
2
votes
0answers
614 views

WDS server & Cisco ASA (DHCP)

My setup: WDS server (w2indows 2003 R2) located on subnet 10.1.1.10 Various site locations all on different subnets. Eah site has a Cisco ASA firewall configured to respdon to DHCP requests. ...
1
vote
0answers
271 views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
1
vote
0answers
133 views

Cisco SPA504G phone CDP/LLDP issue

Good morning everyone, Just recently signed up for the site because I'm looking for some help with an issue that's been plaguing me for about a week now. I hope I'm posting in the right place. If ...
1
vote
0answers
122 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...
1
vote
0answers
49 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
1
vote
0answers
361 views

ASA5505, 9.1, Static NAT Port Range Forwarding

ASA5505 Version 8.4+ (Using 9.1).. Adding port range for static nat. object network server_x host 123.123.123.123 access-list outside_in extended permit tcp any object server_x range 1000 2000 ...
1
vote
0answers
427 views

ASA Slow IPSec Performance with Inconsistent Window Size

I have a IPSec link between two sites over ASA 5520s running 8.4(3) and I am getting extremely poor performance when traffic passes over the IPSec VPN. CPU on the devices is ~13%, Memory at 408 MB, ...
1
vote
0answers
238 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
1
vote
0answers
165 views

Can't remote into server from Android phone after VPN client connects to ASA 5505

I have a Samsung Galaxy Note. I am connecting to an ASA 5505 using NCP as the VPN Client. Connecting is no problem. However, when I try to remote into my server, using xtralogic remote desktop the ...
1
vote
0answers
339 views

Dual pppoe isp connection on a Cisco ASA 8.4

Thank you for helping me. I've a Cisco ASA 8.4 with dual isp connection (pppoe authentication on both line). I configure Two vdpn groups for each connection and add two vpdn username to my cisco's ...
1
vote
0answers
112 views

Disable response from outside interface on ASA 5505 while allowing ping (and response from outside) on the inside interface?

On the ASA 5505 How do I allow icmp requests out (and responses back in) while not allowing a response from the outside interface when pinged.
1
vote
0answers
749 views

ASA 5505 unable to get Lan2Lan and L2TP VPN's working together

I am connecting a remote ASA to a central site with the following settings: Phase 1 IKE: Encryption: DES Authentication: MD5 DH: DH2 Phase 2: Encryption: DES Authentication: MD5 I was getting the ...
1
vote
0answers
430 views

Partial VPN connections on Cisco ASA

Cisco ASA 5505 in remote site, connecting as Easy VPN client to ASA 5510 at HQ. VPN light is green, and sh crypto isakmp sa shows active security association. However connectivity to some of our ...
1
vote
0answers
272 views

LOCAL and RADIUS authentication on ASA

Have configured local authentication which was working fine.And today I wanted to implement RADIUS too .. but after I have done, Im unable to login to my firewall user-identity default-domain LOCAL ...
1
vote
0answers
422 views

Connecting to a Cisco ASA 5510 with Win 7 VPN client

Is it possible to configure a Cisco ASA 5510 to accept a connection from Windows 7 with the built in VPN client software in Win7 ? I know this question has sorta-been asked before on SF but I'm ...
1
vote
0answers
512 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
1
vote
0answers
477 views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
1
vote
0answers
2k views

How to open ports in Cisco ASA 5505 using ASDM?

am new to cisco and i badly need help in opening ports using ASDM. I already tried natting but it only allows 1 outside and 1 inside rule ex. Inside Static Rules 10.x.x.x outside 72.x.x.x Outside ...
1
vote
0answers
333 views

Cisco ASA 8.4 Port Forwarding Site-to-Site VPN

I have a Cisco ASA (running ASA 8.4) which has a Site to Site IPsec tunnel to three sites. These sites have overlapping address ranges, so on my ASA I have setup NAT so everything is accessible. I ...
1
vote
0answers
2k views

Cisco ASA - Duplicate ISAKMP SA - REKEYs

I have an issue with IPSEC VPNs where a single endpoint generates multiple ISAKMP SAs. (in my examples I have replaced the IPs - 1.1.1.1 is the remote endpoint, 10.10.10.10 is an object on the remote ...
1
vote
0answers
129 views

Connect to workgroup computers by name behind ASA 5505 with VPN

We have a Windows workgroup sitting behind an ASA 5505. All clients receive their IP assignment from the ASA. VPN is set up and we can connect to the local LAN and connect to the machines by IP, but ...
1
vote
0answers
121 views

Cisco ASA Dynamic Access Policies with LDAP

When setting up a Dynamic Access Policy on an ASA that is already configured to use SLDAP for authentication, can attributes other than groups be used? Say a single user?
1
vote
0answers
113 views

NAT confusion regarding cisco ASA5510

I'm setting up my first cisco firewalls. A little information first:I have two asa5510 setup in a working active/standby pair. From my ISP i have two public subnets. A /29 and a /26. On my DMZ ...
1
vote
0answers
614 views

Site B FXO configuration for incoming calls

I am trying to configure the FXO port (voice-port 4) on a Cisco SRST881. Currently, there is one working remote extension here (ext 50) and all calls originate from our main office. My goal is to ...
1
vote
0answers
726 views

Cisco ASA - DHCP Relay doesn't seem to be working consistently

I'm having an issue where some users on one of our DMZ networks aren't getting a DHCP address from the Windows DHCP server on our internal interface. Being that not everyone is affected is making ...
1
vote
0answers
1k views

Cisco Remote Access VPN authenticating via RADIUS over Site2Site VPN

Is it possible to setup the remote access VPN to athenticate to a RADIUS server that is on the other end of a Site to site VPN on the same ASA? I have an ASA 5505 that is at a branch office with a ...
1
vote
0answers
736 views

Site-to-site VPN using IPCop and Cisco ASA 5505

So I'm coming into a company who wants to move away from their IPCop firewalls and replace them with Cisco ASA 5505's. Instead of ripping the entire network down and keeping it down for however many ...
0
votes
0answers
31 views

Preserving VPN Flow on ASA + netsh

I have a tcp connection established over a site-site VPN and when the VPN drops it causes errors on the client when sending after the tunnel is re-established. When having this problem before, ...
0
votes
0answers
76 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
0
votes
0answers
16 views

Monitor traffic on ASA-5512X IPS module?

Is there a way to monitor traffic from a SPAN port on a switch to test the ASA IPS Module? I would like to setup testing for our ASA. Will using a SPAN port on a switch and connecting that to the ASA ...
0
votes
0answers
65 views

ASDM - ASA Issue

This is actually a two part question, if anyone has had experience with the issue and could help me out it would be greatly appreciated. Backstory: Using GNS3 with ASA 8.4(2) and ASDM 7.1(5). I've ...
0
votes
0answers
24 views

Find a VPN Name on a Cisco ASA box given a remote IP address

I have a Cisco ASA box with multiple site-to-site VPNs defined. Is there a way to automate finding the VPN name based on a given remote IP address?
0
votes
0answers
66 views

Cisco ASA Allow ASDM from outside

My Cisco ASA 5515 is running in transparent mode. And I want to open ASDM for outside. I've already run these command. http server enable http 0.0.0.0 0.0.0.0 outside http 0.0.0.0 0.0.0.0 inside asdm ...
0
votes
0answers
30 views

Cisco ASA ASDM Missing Nat options when creating network object

Hello all hope this is a simple fix. In ASDM of one of our ASA's, when we go to create network object. the NAT options to create automatic NAT rule is completely missing. its just a small box to ...
0
votes
0answers
24 views

Setup Web Applications on Cisco ASA 9.1

I've been looking around the Cisco ASA administration screen with our network admin and haven't found the location where Web Applications can be setup. This seems like it should be a pretty straight ...
0
votes
0answers
72 views

Cisco ASA: backup ISP connected to ASA for ASA access alone

What I'd like to do: Connect an interface to a separate ISP and let home user's VPN into the LAN via that interface, while normal web browsing traffic goes out the outside IF. My initial ...
0
votes
0answers
129 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
0answers
44 views

Cisco ASA 5512-x statistic of using “Remote Access VPN”

We had implemented VPN solution for users base on Cisco ASA-51512-x device wirh new OS. Busines want to know about who, how long and when using VPN connection. What is the best practise for that ...
0
votes
0answers
139 views

Can Telnet be used to test Direct Push is open “long enough”

I am getting the event below in the Eventlog regarding Direct Push for Activesync. If it matters we have a Cisco ASA and a Citrix Netscaler. Event 1040 MSExchange Activesync The average of ...
0
votes
0answers
18 views

Making Cisco IPSEC IKE KEY public

I have some OSX users that connect to our Cisco ASA VPN using the built in OSX VPN client. To configure this client I have to provide the Cisco IKE key. I am wanting to know if this key is something I ...
0
votes
0answers
167 views

Cisco ASA 5512 and access on interfaces with same security levels

I have a new cisco asa 5512 Cisco Adaptive Security Appliance Software Version 8.6(1)2 Device Manager Version 6.6(1) with the Security Plus Licence. I have a number of VLAN's containing servers ...
0
votes
0answers
46 views

Cisco Firewalling traffic on Site-to-Site VPN

So with Cisco's, ASA 5505 at one end, 5510 at the other, a Site-to-Site VPN is configured. SiteA and SiteB. Now it get's complicated as their are VLANs both sides, several in fact, but this is working ...