The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
3answers
3k views

Cannot Make a Cisco IPSec VPN Connection Through a PFSense Firewall

We are building an onsite network here and we are using PFSense 2.0 as our firewall. We have no trouble connecting to various services and other VPNs but for some reason we cannot connect using ...
1
vote
1answer
136 views

ICS with Cisco AnyConnect - cisco-anyconnect-win-3.0.4235-pre-deploy-k9.msi

I've installed cisco anyconnect VPN (cisco-anyconnect-win-3.0.4235-pre-deploy-k9.msi) on a 64 bit Windows 8 machine. FYI, I do have internet access, while I'm connected to the VPN. I want to share ...
3
votes
2answers
11k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
0
votes
1answer
852 views

Cisco ASA 5505: Clean delete of IPSec tunnel

What is the easiest way to delete a Site2Site IPSec tunnel? The ASDM seemingly does not offer that functionality. I have to go to various tabs to delete the different elements that were created by the ...
0
votes
1answer
197 views

Cisco VPN client software use licenses? [duplicate]

I am doing research into Cisco ASA appliances and SSL/Anyconnect. What is the actual cost to do a VPN with a Firewall by Cisco? I never realized they actually charged and do they charge per ...
1
vote
0answers
89 views

Adding a Cisco RV084 appliance for site-to-site services in a local area network that I can't change

I have a need to establish a site-to-site vpn connection to a remote office using a Cisco RV084 appliance. We currently are in a shared office environment where our property manager has provided us ...
4
votes
2answers
12k views

How can Mac users change their Windows Active Directory passwords over a VPN connection?

In our office, we are running some Windows servers running an Active Directory domain . We've got a a number of security policies that we enforce, including a 180 day password expiration policy. ...
0
votes
1answer
396 views

Cisco VPN Concepts - Connection Profiles and Group Policy

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they ...
0
votes
1answer
2k views

Cisco VPN client on Windows 8 - dialup ipsec with smartcard, 403 Unable to contact the security gateway

Is there anyone here who is using Cisco VPN client on Windows 8. I am wondering has anyone been able to resolve the error 403 Unable to contact the security gateway. I have found solutions like on ...
0
votes
1answer
185 views

Cisco ASA 5505 in small office configuration

I have a small office network that currently consists of about 10 machines, a gigabit switch, and a router/firewall, in a fairly obvious configuration. I need to add a Cisco ASA 5505 to support a VPN ...
4
votes
1answer
2k views

Nmap ping scan over a VPN tunnel return all hosts alive?

I'm curious as to why running an nmap -sP (ping scan) on a remote subnet linked via a Cisco site-to-site IPSec tunnel returns "host up" status for every IP in the range. [root@xt ~]# nmap -sP ...
0
votes
2answers
935 views

Exposing the AnyConnect HTTPS service to outside network

We have a Cisco ASA 5505 with firmware ASA9.0(1) and ASDM 7.0(2). It is configured with a public ip address, and when trying to reach it from the outside by HTTPS for AnyConnect VPN, we get the ...
0
votes
1answer
2k views

Cisco SSL VPN authenticating aginast AD via LDAP

I have an ASA 5520 and am trying to set up a remote access SSL VPN authenticating against AD using LDAP. Between these two guides: ...
1
vote
1answer
347 views

Connect ADSL modem SMC7904WBRA-N to CISCO RV082

I have a SMC7904WBRA-N ADSL modem/router that connects to the internet with a static IP given by the provider. I've received a RV082 to create a VPN connection which is having problems to connect to ...
0
votes
1answer
214 views

Cisco pix 515e vpn logs

How do i find list of users that logged into the cisco VPN during particular duration from the cli. i am looking for vpn logs for particular duration because my log server was crashed.
-1
votes
1answer
128 views

Cisco error 51 on OSX 10.7.4 [closed]

Cisco VPN client version 4.9.01.0290 does not work on OSX 10.7.4 but it works on 10.7.2. The issue is that x64 are not supported. I am not sure way it is working on another mac with OSX 10.7.2, which ...
0
votes
1answer
3k views

Setting up QuickVPN clients with a Cisco small office router and getting a message indicating I must change the router's internal addressing scheme

I have a Cisco RV110W small office router (this configuration process is common to many Linksys/Cisco routers) and I am trying to define QuickVPN clients. When add a client of type "QuickVPN" the ...
3
votes
1answer
2k views

Cisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnet

I am connecting to a ASA5505 at from home to the head-office using L2TP VPN. Head-office then connects to a other-office via a site-to-site IPSEC tunnel. When in the head-office (192.168.100.0/24) I ...
1
vote
0answers
1k views

ASA 5505 unable to get Lan2Lan and L2TP VPN's working together

I am connecting a remote ASA to a central site with the following settings: Phase 1 IKE: Encryption: DES Authentication: MD5 DH: DH2 Phase 2: Encryption: DES Authentication: MD5 I was getting the ...
6
votes
1answer
5k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
2
votes
2answers
2k views

How can I prevent inside hosts from taking ISAKMP and IPSec NAT-T ports on 8.4 ASA5510?

I have configured a Remote Access VPN on my ASA5510 running 8.4 and enabled it on the outside interface. For some reason if an inside host uses a VPN client to connect through the firewall they end ...
1
vote
0answers
74 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
0answers
624 views

Connecting to a Cisco ASA 5510 with Win 7 VPN client

Is it possible to configure a Cisco ASA 5510 to accept a connection from Windows 7 with the built in VPN client software in Win7 ? I know this question has sorta-been asked before on SF but I'm ...
1
vote
0answers
679 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
0
votes
1answer
391 views

share one vpn connection through windows rras with other clients

I'm having a Cisco VPN connection to access our branch office. Since several people using the VPN I'm planing to install the VPN client on one of our server and share it through RRAS to save the ...
0
votes
1answer
486 views

cisco vpn and on demand routing

We need to connect to a partner via a Cisco VPN from one of our internal servers. This server is already configured for demand dial routing to a different partner, using windows RRAS. The partner ...
0
votes
1answer
397 views

Problems with network routing

Could you help, please? I have two network interfaces: 1) Physical interface (12) 2) Virtual VPN interface (39) Without VPN connection I have access to my local network (for example: 192.168.160.35) ...
1
vote
2answers
3k views

Random VPN Client unable to contact the security gateway

We are issuing new Win764bit Enterprise laptops with the Cisco VPN Client Version 5.0.0.07.0290 installed on it. We are importing a pcf file from a CD given to us by our security group into it before ...
2
votes
2answers
861 views

View unknown IPsec pre-shared key

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it. IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not ...
0
votes
1answer
744 views

cisco vpn client randomly disconnects with pfSense

My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests. Some machines inside my network need to access a VPN through the Cisco ...
1
vote
1answer
116 views

Multi domain wildcard cert on IIS only works when I'm connected via VPN

I have an IIS 7.5 server which, in order to access via Remote Desktop, I have to connect to Cisco VPN It has several with several sites on it e.g. site1 bindings: www.domain1.com, domain1.com ...
1
vote
1answer
934 views

Cisco Anyconnect via OpenVPN tunnel on Windows

I'm trying to connect to a Cisco VPN using an USB-tethered connection using OpenVPN. The moment I enable Cisco AnyConnect, traffic stops on OpenVPN interface, resulting in disconnection. OS is ...
1
vote
1answer
5k views

network is not available even when cisco vpn client is connected. wrong route?

I'm using Vodafone 3G modem. I've disabled other network devices in the system (ethernet, wifi, wimax) turned off firewall and antivirus. cisco vpn client connects successfully but I still can not ...
1
vote
1answer
2k views

Route IP from one vlan to another vlan in the same vrf of the same router

Can you route a IP (/32) from one vlan to another vlan in the same vrf of the same router ? Exemple: example_router#show version Cisco IOS Software, c7600s72033_rp Software ...
1
vote
1answer
2k views

How can I stop openconnect from changing /etc/resolv.conf?

When I run openconnect (with the default vpnc script) it changes /etc/resolv.conf and it really shouldn't do that. I am just using the VPN for a few specific host not for a full Internet connection.
1
vote
1answer
654 views

Replace a Cisco VPN IPSec concentrator with an Ubuntu-box

Is it possible to replace a Cisco VPN IPSec concentrator with Ubuntu and for instance Strongswan? 1) Do Strongswan implement the same protocolls that Cisco uses? 2) Can we retrieve keys from the ...
1
vote
2answers
662 views

Configuring ASA to direct traffic on certain ports to specific outside interface

I have two outside interfaces, A and B. Let's say I want all traffic going in or out on port 1000 and 2000 to be directed to A, while all other traffic should go to B. So client is accessing a web ...
0
votes
2answers
255 views

ASA5505 vs server 2008 R2

We have an asa5505 and I am trying to create an IPsec VPN connection so that our users are able to connect to network when they are out of the office. They will be connecting with the vpn connection ...
1
vote
1answer
144 views

ASA5505 VPN connection

We have a few people that travel (sales reps) and when they are out of the office they need to be able to VPN in. We have an ASA5505 with Security+ and unlimited users. This restricts us to 25 VPN ...
9
votes
2answers
22k views

Cisco AnyConnect SSL VPN client allows local LAN access, but not on additional multi-homed server

We have a machine for connecting via Cisco SSL VPN (\\speeder). i can ping our our speeder on 10.0.0.3: The routing table on \\speeder shows the multiple IP addresses we have assigned to it: ...
0
votes
1answer
651 views

Cisco site-to-site VPN, Site B has voice but no data or internet access

I am working on my first Cisco project. Site A has a Cisco UC520 with working VoIP phone system configured. Site B has a Cisco 880 router. My goal is to connect each site with this VPN connection. ...
0
votes
1answer
306 views

Cisco AnyConnect VPN Client drops

I have the Cisco AnyConnect VPN client on a Server2003 std edition. The client will periodically drop and I have to go in and manually reconnect it. Is there a way with to restart the client and ...
1
vote
2answers
3k views

AES Encryption License for ASA series?

I'm trying to set up a VPN and am struggling a little. I've googled some of the lines in the log and someone suggested that to use AES encryption I have to purchase a license from Cisco. Can anyone ...
1
vote
1answer
1k views

Is turning off Perfect Forward Secrecy a security threat?

I had to disable PFS in the IPsec rules on one of our ASAs to allow Android Gingerbread clients to connect. Does doing so compromise the security of the VPN? Communications are AES-256 or AES-128 with ...
0
votes
1answer
563 views

How to NAT a 192.168.x.x corporate domain on a Cisco ASA to not conlict with VPN remote users LANs

I'd successfully configured an IPSEC VPN as per this question:- How to disable dns doctoring for IPSEC VPN connections for ASA 5510 However I ran into the problem that remote users are often on a ...
2
votes
3answers
3k views

VPN packet capture on ASA5505

Following up from a previous question regarding how to capture packets on the ASA5505 I'm having some difficulty in distinguishing which traffic has come through the VPN and which was generated from ...
1
vote
2answers
2k views

Cisco ASA 5505 VPN - regular translation creation failed for protocol 50 src

I try to vpn from my home network to my company network and this has always worked well until yesterday when I installed a Cisco ASA 5505 at home. Now I can not connect from my home network to my ...
4
votes
3answers
4k views

Does Windows 7 VPN work with a Cisco ASA 5510

We have a Cisco ASA 5510 router and are trying to get a couple users setup for VPN access. They are running Windows 7 x64 at home and cannot install the VPN client we have for our router (it only ...
4
votes
4answers
3k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
2
votes
3answers
4k views

Cisco VPN Client Behind ASA 5505

I'm trying to get connected to another ASA via Cisco VPN Client. I am behind an ASA 5505 myself and I am tryihng to VPN to a 5510. I get the message: Secure VPN Connection terminated locally by the ...