Cisco Firewall :: 9971 Phones Supported For Phone Proxy?
Apr 28, 2011Is the 9971 phones supported for phone proxy (since it`s SIP and SIP i think it`s not supported for Phone proxy).
View 2 Replies
ADVERTISEMENT
Cisco Firewall :: ASA 5505 / One Way Audio For Phones Using IP Proxy?
Jun 5, 2011I've got an ASA 5505 running 8.2 configured for solely as an IP phone proxy, it is the default gateway for the cucm box and PRI router, its inside interface is directly attached to the same subnet as all internal phones as well. Calls can be placed from either end, but after call is established, proxy phones does not hear audio from internal or pstn phones. The proxy phone registers with cucm with the remote internal IP of the phone that obviously cannot be reached by corp network.
Debugging from pri router shows the rtp traffic destination is the internal ip address of the proxy phone 192.168.0.50, why is the phone registering with its internal IP 192.168.0.50 rather than its Natted external IP 50.50.50.50 that can be reachable by cucm and other phones?Proxy phone is a 7945, after it registers, I do not see it under sh phone-proxy secure-phones, or sh phone-proxy signaling-sessions while on a call.
ASA Proxy config
interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5!interface Ethernet0/6!interface Ethernet0/7!interface Vlan1nameif insidesecurity-level 100ip address 10.10.33.25 255.255.255.0!interface Vlan2nameif outsidesecurity-level 0ip address 65.x.x.24 255.255.254.0!boot system disk0:/asa823-k8.binftp mode passivedns server-group DefaultDNSdomain-name ----.comsame-security-traffic permit intra-interfaceaccess-list inside_access_in extended permit ip host 10.10.33.10 anyaccess-list inside_access_in extended permit ip any host 10.10.33.10access-list inside_access_in extended permit ip host 10.10.33.5 anyaccess-list inside_access_in extended
[code]....
Cisco VPN :: How To Enable VPN On 9971 Phone
Jan 17, 2012I have a problem with 9971 phone its works perfect inside network but I cant figureout how to enable VPN on this phone.Also cant found any VPN menu on phone configuration.
View 2 Replies View RelatedCisco Firewall :: 5520 - ASA Phone Proxy After Failover?
Dec 3, 2012I have a problem with my asa phone proxy. i have two ASA 5520 in HA. I have 10 phone register with ASA active primary. if i execute the command show phone-proxy secure-session. i can see the phone session on the ASA.
if i perform the same command on the passive ASA i can't see the session replicated from the active member.
If i switch the cluster the phone enter in a registrating loop and can't connect to the ASA now active.
If i switch back immediately (the session are still present on the first asa) the phone register again and all works
the ASA have version 8.4(5)
the phone are a 7921g
is normal that the skinny don't start again and re-register the phone on the ASA that became active after failover?
Linksys Wireless Router :: E1000 Hung Up All Cordless Phones And Turned Off Cell Phone
Apr 21, 2010I'm having an issue with my work laptop. I'm just setting up a wireless connection for the first time. I bought the Linksys E1000. I have used this laptop at work and at hotels for a 54 MbPS connection. I set up the Linksys at home. It sees the network and will tell me that it is connection at 54 MbPS. Then it quickly goes down to 11 then 5.5 then 2. Eventually it runs so slow that I time out of the security portal at work because its so slow. Occasionally it even loses the network and has to find it again. I'm only about 20 feet away from where the router is located. I have hung up all cordless phones and turned off my cell phone.
View 2 Replies View RelatedD-Link DIR-655 :: Setting Up Udpxy Proxy To Stream Ip-tv Channels To My Phone?
May 12, 2012i want to watch IP TV on my HTC DESIRE, i have DIR-655....how to setup udpxy proxy to stream ip-tv channels to my phone?
View 1 Replies View RelatedCisco VPN :: 8961 - IP Phones With AnyConnect On ASA / Can't Call Other Remote Phones
Jan 4, 2012I have a CUCM BE environment with a number of remote users with 8961 phones connecting to an ASA 5501 via AnyConnect. The phones register fine and can make inbound/outbound calls as well as four digit dialing to other users at the corporate site.
The problem is when a remote user tries to four digit dial another remote phone. The called phone will ring but there is dead air once answered and then the line goes dead.
This sounds like a routing issue to me. How to get AnyConnect clients to be able to reach each other?
Cisco :: Video Call From 9971 To Ipad2?
Mar 17, 2011Is it possible for a 9971 and ipad2 to have a video call either with Webex or another app? We're getting both soon, just seeing if anyone has tested it yet.
View 3 Replies View RelatedCisco VPN :: 9971 / Password Storage On AnyConnect VPN
Jul 22, 2011I am trying to setup a SSL Anyconnect VPN tunnel between a Cisco 9971 IP Phone and our ASA. I have selected AAA as the authentication mechanism and created local users on the ASA. Everything works fine i.e the VPN username password is prompted and once I put in the credentials the phone gets registered to the Call Manager?The issue is that when the phone is rebooted or the VPN disconnects then again the VPN username is prompted. How can we avoid asking the username and password or is there a way to store the credentials on the phone.
I know that this is possible in the IPSEC Client but not sure how to implement in the Anyconnect VPN.
Cisco Switching/Routing :: POE Switch Capable Of Powering 9971 / Cam And Think Client
Nov 4, 2011Which smaller POE switch is capable of powering a 9971 IP phone with a cam and a think client attached?
View 3 Replies View RelatedCisco Firewall :: PIX 515 V7.2.4 - Filter TOIP Flows Between Call Server And Phones?
May 26, 2011Do you know if it is possible to filter TOIP flows between call server (Siemens technology) and phones ?Specialy, PIX is able to support dynamic ports opening?? Is there an ALG embeded?Is it required to upgrade PIX or not? is required a special licence??
View 1 Replies View RelatedCisco :: Setting Transparent Proxy To A Proxy Running On A Client?
May 28, 2012I would like to connect devices to my network so that their traffic passes through a proxy running on my computer. I figured the best way to do this is by setting the proxy on my router to the one I am running, but then I would need to have another connection to the computer running the proxy or else there would be an infinite loop ?? something like that. so:
Internet -> router (1) -> my proxy on comp A -> router (2) -> computer B
Cisco Firewall :: ASA5520 To Act As Web Proxy
Dec 15, 2012I am using a squid proxy behind an ASA5520 firewall to collect the users to the internet. Squid is just necessary to log what is going on in order to find a quick solution when the internet slows down.
Considering that I have unlimited licenses and I would like to get rid of squid, I wonder if the ASA has some functionalities to track which websites are being used and how much traffic is generated. If there is not, I would like to know if Cisco offers a good product to replace Squid.
Firewall / Proxy For Static IP?
Jul 5, 2011I have a server having windows server2003 os. I have configured my web application on this server which is accessible over internet using static ip. But I found that there is an risk of viruses on my server. Thats why now I want to configure this server behind the firewall/Proxy as well as dont want to share my static IP.Is there any way to keep server protected using firewall / Proxy application which is free. And also tell me how to nat the static ip.
View 4 Replies View RelatedCisco Firewall :: Cut-Through Proxy Not Working With ASA5520
Jan 16, 2012I'm trying to configure an ASA 5520 with cut-through proxy feature. The user is required to be authenticated when trying to access an outside resource from the inside. This is a test lab before it is implemented in production. [code]
View 15 Replies View RelatedCisco Firewall :: 5555 ASA Disabling Proxy ARP
May 19, 2013We just recently upgraded a 5540 ASA running 8.2 to a 5555 running 8.6. I have a question concerning disabling proxy ARP with static nat rules in place. We have several instance where devices in a dmz have a static nat entry to the outside and a static nat entry to the inside using the same IP. My question is if we disable proxy arp on the inside interface would that cause device on the inside not to be able to reach the device in the dmz? From what I have seen you don't want to disable it on the outside interface due to all the static nat translations. But we have some that are have nat translation going to the inside as well. How does proxy arp come into play there? Below is a diagram of an example of the setup I a referring to. This is on the new 5555 running 8.6
View 1 Replies View RelatedCisco Firewall :: ASA IPv6 NDP Proxy With 5505
Nov 26, 2011i have a 5505 running 8.4, and my ISP is giving me a /64 IPv6 Prefix. Basically, I have a subnet between my ASA and my ISP's box which is my outside, running into a private subnet (192.168.0.0), as most of ISP does.I have my ASA behind, and i'd like to turn on IPv6 for my inside hosts, but the problem is that I can't modify the routing on y ISP's side, and thus it will assume all host are directly connected in my outside. Thus, I would need some kind of Neighbor Discovery Proxy on the Outside of the ASA. Is there such feature ?
View 1 Replies View RelatedSecurity / Firewalls :: Using Non-proxy Software Through Proxy?
Mar 31, 2012I access the internet from my company�s LAN, which has a restrictive firewall, so I cannot request the admin to open any ports manually for me. Hence I use a software called your-freedom. This proxy software supports both http as well as socks 4 and 5 proxy (by entering the proxy IP 127.0.0.1 (localhost) and Port 8080 for http proxy OR 1080 for Socks Proxy), and I have successfully been using web browsers and some other softwares that support proxy/ allow proxy info to be entered to login/ connect to the internet. Your-Freedom also supports port forwarding.However, the softwares I intend to use do not have any options to enter proxy methods or proxy ports (as far as I have noticed). I have tried to proxify these 2 softwares using softwares such as SocksCap and Free Cap, but either they don�t work, or my settings in proxifying are not correct. I believe I will have to do port forwarding or proxify the softwares, but have been unable to do so in the correct manner.
Following is the info on the 2 softwares:
1.NOW Trading terminal:[FONT=Times New Roman]Normally when I start the NOW or Zerodha software, the software starts and I get a login screen, but under firewall conditions, I get the initial Splash screen but then the software stops with the error: [b][u]NOW Initialisation failed for Interactive Engine << os error>>.
2.PowerIndia Bulls:The software is written in Java and starts with a batch file (PowerIndiabulls.bat) located in C:UsersDEFAULT_USERNAMEAppD..... I converted this batch file to .exe (with battoexe software) and then ran it through a proxifying software. The .exe start properly without proxifying software but not under proxifying environment. Basically the software needs to connect to the internet using Port 443. I am also expected to keep ports 443, 41599 and 59598 open. software's requirement is available at Indiabulls Securities: Indiabulls Securities is a leading capital market company offering securities broking and advisory services, depository services, equity research services to its clients in India. (item no. 5).To confirm, while the software is unable to connect through port 443, you will get an error message: "Connection to Login Server could not be established" when you try to login with any random Username and Password.To know that the software is able to connect properly, you will get an error: "This User ID is not enabled to be used with this product".
Cisco Firewall :: 881W IP Configuring Auth Proxy
Apr 15, 2013Platform: 881WIOS: C880-DATA-UNIVERSALK9-M 15.0(1)M3License:
I have tried both advsecurity and advipservices
Problem: Configuring an auth-proxy redirect on seccessful authentication,Cisco's documentation states that when you are configuring auth-proxy, you may specify a url in which the clients will be redirected to when successfully authenticated.
The command is:,ip admission proxy http success redirect <url-string>,However, the command does not seem to exist on many of the latter IOS versions. I am also unable to find any documentation with alternate methods of sending a redirection to the client after a successful authentication. Is this command depricated? Is there a more efficient method of redirecting?
Cisco Firewall :: Debian Transparent Proxy With ASA 5520?
Apr 21, 2012recently i have install asa 5520 (8.2) in my networks.Earlier I was using my transparent proxy with 2821 by the following configuration access-list 120 deny ip host 192.168.112.12 anyaccess-list 120 permit tcp any any eq wwwaccess-list 120 deny ip any any route-map PROXY-REDIRECT permit 10match ip address 120set ip next-hop 192.168.112.12 ip policy route-map PROXY-REDIRECT and was working fine. How i can use my transparent proxy with ASA?
View 2 Replies View RelatedCisco Firewall :: Redirecting Traffic To Proxy From ASA 5505
May 20, 2011I have ASA 5505 with base license. I like to install proxy server in my network.I configured below commands to forward my traffic to proxy server from my ASA.
If there is any configuration that i need to configure.And if possible send me the configuration guide to setup SQUID server. ( Actually it was set up by the 3rd party vendor)
Cisco Firewall :: ASA 5520 - How To Block Proxy Software
Apr 18, 2011I have ASA5520 with CSC bundle. How can i block Proxy Softwares like Ultrasurf.....?
View 2 Replies View RelatedCisco Firewall :: Configuring UC-Proxy On ASA 5505 Version 8.0?
Jan 24, 2012 I'm trying to configure UC-Proxy using an ASA 5505 with software version 8.0.4.I was following the instructions in DOC-5704 and ASA 8.0 CLI.I don't have USB security tokens in UC solution, instead I'm using IP phones Cisco 7961 with MIC.I configure all the items as the documentation says but when I restart the phone outside the Firewall, the 7961 don't registrate with the Call Manager.Checking the troubleshooting I found that it's possible certificates problems but I don't know if I need to do something in phones.
I would like to know if there is any consideration when the UC proxy works just with MIC.The outside phone is a Cisco 7961 configured with static IP address and TFTP address of Call Manager (static NAT in ASA).
Cisco Firewall :: IP Admission Auth Proxy 881W
May 31, 2011Platform: 881W
IOS: C880-DATA-UNIVERSALK9-M 15.0(1)M3
License: I have tried both advsecurity and advipservices
Problem: Configuring an auth-proxy redirect on seccessful authentication
Cisco's documentation states that when you are configuring auth-proxy, you may specify a url in which the clients will be redirected to when successfully authenticated. The command is: ip admission proxy http success redirect <url-string>
However, the command does not seem to exist on many of the latter IOS versions. I am also unable to find any documentation with alternate methods of sending a redirection to the client after a successful authentication. Is this command depricated? Is there a more efficient method of redirecting?
Documentation I am using:
URL
Cisco Firewall :: ASA 5520 - How To Block Proxy Over Secure Browser
Mar 24, 2011Having some problems blocking users installing/using secure browsers proxy. Currently runing ASA 5520 ver. 8.3 & IPS SSM-20 7.0 (2) E4 & Websense web filtering. Able to block most proxy sites with Websense that use port 80 but recently found that some users using some products like Njutrino that use their own secure browser that use it's own proxy over SSL connection.
View 3 Replies View RelatedCisco Firewall :: ASA5505 - Redirect ASA Traffic To Proxy Server?
May 20, 2011I have ASA5505 with bese-license. I like to install proxy sever in my network and i want redirect traffic to the proxy server.
Below i added configuration in my firewall.
ASA(config)#access-list wccp-servers permit ip host 192.168.6.10 any ASA(config)#access-list wccp-traffic permit ip 192.168.6.0 255.255.255.0 any ASA(config)#wccp web-cache group-list wccp-servers redirect-list wccp-traffic ASA(config)#wccp interface inside web-cache redirect in
furher configuration and if this configuration is enough, then how to check whther its working or not in my firewall.
Cisco Firewall :: ASA5520 Cut Through Proxy HTTPS Concurrent Connections
Jul 29, 2012What are the limitations on the max number of concurrent HTTPS connections when using Auth Proxy for HTTPS traffic on a Cisco ASA 5520.
1) What is the max number of concurrent Authentications that the ASA can perform (HTTPS)?
2) Once Authenticated. What is the max number of concurrent HTTPS Authenticated connections to the back end HTTPS server.
Cisco Firewall :: ASA 5550 Proxy Inspector Drop Reset
Dec 19, 2012Outside users with certain public ip addresses are not able to access our website. Below is a log from our ASA 5550 8.2(5) on one of the clients that's being dropped. Packet trace result shows that the outside public addresses are allowed. We do have a TAC case open.
View 1 Replies View RelatedCisco :: IP Proxy-arp Vs Ip Local-proxy Arp
Jan 8, 2013Anyone know the differnce between these two on a MLS? Seems that proxy arp as I know it works with or without the 'local' version.
View 7 Replies View RelatedCisco WAN :: Is WAN Optimization Supported On ASA5520 Firewall And 3750 Switches
May 7, 2011Is WAN Optimization supported on Cisco ASA5520 Firewall and Cisco 3750 Switches. We need to add/enable WAN Optimizer functionality to make 3PAR data replication?
View 9 Replies View RelatedCisco Firewall :: Is Multicast Supported On ASA 5510 For IPSec VPN Clients
Dec 6, 2011Our customer is using multicast in their internal network for their IP video deployemnt. Internallt on the network everything is working great.
We have two folks in management who want to be able to view the live multicast video feeds of the cameras remotely. I have tried to accomplish this using the Cisco VPN client. Although VPN connectivity is good (we can ping the individual cameras) they are unable to view the live multicast feeds. I enabled multicast globally on the ASA and the inside interface and get the same results.
Is there a way for the ASA to support the remote IPSec VPN client to view the multicast strams?
Cisco Firewall :: ASA5585 State Link Supported Over MPLS?
Jun 29, 2011Running ASA5585’s in active/standby across a local campus MPLS network. Supported design, leading practice etc. Specifically our design is that two ASA5585 are configured as active/standby through a local campus MPLS network over 10gig links through ASR9k etc. The ASA’s are providing inter-vrf routing capability only with p2p l2vpn circuits configured for each logical interface between the ASA over MPLS etc.The failover link is via a direct fibre and the state link will be through a p2p l2vpn (option for direct fibre also)Is this a supported design to begin with?
View 2 Replies View RelatedCisco Firewall :: FWSM For 6506 / 6509 Is Supported In VSS Environment?
May 29, 2012Does the FWSM for a 6506/6509 is supported in a VSS environment?Also, does the FWSM work with the 2T supervisor module?
View 1 Replies View Related