Sometimes it’s possible you need to have a back-up solution for the VPN. In case a customer doesn’t want to pay for licenses of AnyConnect on a Cisco ASA. In this post, I write about the option to configure an L2TP over IPsec. Go to Wizards in the ASDM and select VPN Wizards then IPSec […]
Cisco | Microsoft VPN Client option. Read More »
In my previous post in april I figured out how to upgrade the software step by step. In the mean time I found out it’s possible to do this in once. You need to setup first some tools before you can start. Have a TFTP and a FTP Server TFTP server needs to contain the
Cisco ASA – SourceFire 5506-X | direct upgrade to latest build Read More »
Yesterday I started to configure and try a Cisco ASA 5508-X with firepower. With the Cisco ASA 5506-X with firepower i knew already that it would take some time to update the firepower software. Now with this new device I had some time to see and test. I started yesterday early afternoon the general configuration
Cisco | ASA 5508 with Firewpower Read More »
Cisco ASA Configuration part When you want to connect to a Juniper Netscreen SG5 device which has a Dynamic IP address. It can be difficult to find what the correct specs are for this type of setup. First you need to go: Configuration > site-to-site VPN > advanced > Tunnel-Groups You have to edit the
Cisco ASA | Juniper site-to-dynamic VPN Read More »
To see if you SSL version for AnyConnect is on a safe level. You want to check this first via the following website https://www.ssllabs.com/ssltest/analyze.html You need to enter your domain name which you use to connect with the clients to logon to. For this you need to use at lease ASA software version 9.3(2) or
Cisco | ASA disable SSL 3.0 settings and change it to TLS V1.2 Read More »
It can happen that you need to configure an IP object range for office 365. I most cases this is because you have a policy that client users are not able to connect directly to the internet. Because of the company policy. In case of the last option where you probably have blocked all http
Cisco – Office 365| Office 365 IP object range on a Cisco ASA Read More »
Today I upgraded a Cisco ASA 5505 from 256MB memory to 512MB and 128MB Flash to 256MB Flash. After the upgrade the cisco asa forgot the configuration (not that bad, because I had a configuration backup), however after I uploaded the startup-configuration and than I saw the following output. Well I was thinking what is
Cisco ASA License gone after memory and flash upgrade how-to-recover Read More »
Today as I’m currently working wit a Cisco ASA 5510 to create a DMZ. I saw some create options which I didn’t use in the past earlier. In the Cisco ASDM 6.4 you normally add the external ip address to a service. Until I saw the option under Firewall > Public Servers. Public servers? Yes
Cisco ASA: easy connect server with service as static forwarder Read More »
It could be hard to find the information about user rights on a Cisco ASA device. Start the ASDM of the Cisco asa Go the the configuration button and click on it. Go to Device Management Click on the + sign for Users/AAA Click on AAA Access > Configure the type of access ( I
Setup User privileges on a Cisco ASA Read More »
Few weeks ago Installed 2 Cisco ASA 5510 devices. For a ISP & Active/Standby failover. In an earlier post I wrote about the ISP failover. now i’m going to write about the Active/Standby failover. For the Active/Standby failover you need 2 Cisco ASA’s in my example I use 2 times a Cisco ASA 5510. What
Cisco ASA 5510 (2x) Active / Standy failover Read More »