On CIsco ASA 5545x not able access finale application through SSL VPN, error shown is "class not found exception" and "bancs2000.bancs2000.class" default profile is used in VPN while we trying access HTTPS internal web server. Same behavior observed in version 8.6 and 9.1.
Above errors observed during JAVA loading process, browsers like Mozilla, Chrome and IE are tried.
I'm installing a new platform LMS 4.0.1 under VMWare and Windows 2008 R2.
I installed via Windows 2008 R2 Patch without problem in LMS 4.0, then updated in LMS 4.0.1.
I'm facing several issues during this installation.
The first issue I have is the following:
When I launched topology services, java jre file jre-6u22-windows-i586-p_withjacorb.exe was downloaded and I saved it on disk.
I clicked on file to install it and get the following message during the installation:
Error 1330.A file that is required cannot be installed because the cabinet file C:UserslmsAppDataLocalLowSunJavajre1.6.0_22Data1.cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.
It tried to install certificate without success. I have internet access to java.com but it seems publisher is not trusted.
Just installed an ASA 5505 with AnyConnect Essentials. AnyConnect installation works fine on some windows boxes (All flavors) but have a couple machines with issues. This makes it clearly a computer side issue. When I try to log into the ASA to download the client with IE 9 the ASA just keeps asking for my logon credentials. If I I use Firefox my credentials work and I get as far as the "Using Sun java for installation" with instructions to click yes on the java security warning. The Java Security warning never arrives like on machines that don't have this problem. Firefox just hangs and has to be killed by task maanger. Remove and reinstall of both Java and Firefox fail to correct the problem. Any AnyConnect clientside recovery tips beyond Java and Browser reinstall?
A Google search show a few folks using Ubuntu and old PPC Macs seeing the same java error I get on these couple of windows boxen. [code]
Just a few questions. We are looking to deploying Cisco ASA 5545 into a network. I have a couple of issues with designing the network correctly.
We need to be able to scale out to more hosts than a single VLAN, we would also be considering adding 4948E switch behind the ASA and potentially a stack in front.
The problems are:
1) If we have an outside stack of public 4948E (so we can connect some hosts outside the firewall, such as additional ASA's running in NAT mode) for VPN. Is this a reliable, recommended configuration? The reason being we need to have the ability to add other seperate ASA protected networks that we don't want going through the 5545 as it's going to quickly run it out of capacity. If I have the L3 switch stack in front I'm guessing we would have a small subnet to link upstream and then sub-subnetwork into two blocks, one on the inside interface and one on the L3 switch for the other hosts? Or would it be better to let the upstream provider do this, and then just get them to provide us with two smaller subnets rather than one big one? As below if we do L3 stack ourselves we would need to small subnets, one to communicate with upstream and one to link ASA subnets. This seems like a waste of IP's. I was wondering if I could use Internal IP space on the L3 > ASA link, but I thought that could be an issue for BOGONS list.
2) If I want to extend the inside network (Cisco ASA would not run NAT, just public IP's on the inside, routed to the outside interface of the ASA) there are two ways. Use the ASA to create subinterfaces/VLANs (but that would be routed via the ASA - may be a performance hit?) or use a L3 switch behind the ASA. How does one accomplish running L3 switch behind ASA properly?
I have a need to utilize two factor authentication using a machine certificate and users AD crednetials. What we would like to do is to have the ASA and AnyConnect verify the certificate exists, check against our in house CA for validity, if valid pass the user credentials to the AD servers and establish the tunnel. If not valid quarantine the session and pop a message to the user to contact the help desk ASAP. My guess is the following (using ASDM 6.6, ASA 8.6.1, ASA 5545-X):
1. under the connection profile I have select BOTH for authentication and added a AAA server group.
2. under Cert Management I have added the 3 certs that are present on all company mobile assets
- Cert America
- Cert Europe
- Cert Root
3. I have an identity cert installed from the company CA and it is selected as the device cert under connection profiles
4.Local Cert Authority is Disabled
5.Under Remote Access>Advanced>Certs for AnyConnect>
- I have mapped DefaultCertifiateMap pri 10 to Company_Cert connection profile
- The mapping is looking for Subject: CN: <Contains> (string) ----where string is a common component of each Cert listed in #2.
Question #1 - Is this correct for utilizing certs and AD auth or have a missed any steps?
Users are directed to a an initial installation URL - where the AnyConnect client performs the installation and passes down the intial AC profile which auths using only AD creds. On subsequent connections users who pass the certificate mapping check are migrated to the connection profile which uses the dual authentication method.
Question #2 - When I attempt a new installation of AnyConnect using the two factor URL . I receive an error "certificate validation error" and the installation fails - for the life of me I can not figure out why???? The machine has all three certs, using IE9 as the browser.
Currently have an ASA 5545. What I want to do is allow our support team to perform ALL show commands (up to and including show run) but not enable them to perform ANY configuration changes on the devices (not get into config t). This is to allow them to check ARP tables, routing protocol status, etc
i don't have access to the ASA at the moment and haven't been able to figure it out in IOS, i'm assuming its not too hard.
I am trying to configure my ASA 5545 firewall in area 0 but when I do so, the neighbor relationship never establishes. A debug on OSPF gives only one response: [code] Why the ASA is ignoring the input packets?
View 4 Replies View RelatedWe are planning to upgrade the ASA license in an A/S pair by adding the ASA5500-SC-20= license. The ASA is 5545 and runs 8.6. According to documentation, after 8.3 version, the ASAs can share a license features and do not require the same license on both boxes. I run a test in GNS3 with 8.4(2) images and I saw that by adding the 'activation-key' command only on the primary unit did the job as the 'show activation-key' output shows. In order to be 100% sure would like to verify the following:
Putting the activation-key only on the primary unit is enough and there is no need to do anything elseIn case the primary unit is standby, again we have to put the actication-key command on the primary unit (I am asking this because the 'activation-key' command is not listed under the commands that are not replicated to the other unitk, but doesn't make sense to be replicated since the activation-key is 'tied' with the S/N of the device).
I've configure Ldap authentication on ASA 5545 to allow only a certain user group. I mapped the the memberOf group but this seems not to be working as it allows all AD users. [code]
View 1 Replies View RelatedI got problem with RVL200, he works good on my botch mac's witch OSX 10.5,10.6 and Firefox 3.6 but stop working after last java update. The machine witch 10.5 is working because I don't update Java but the other computer is up-to-date.
Problem is with lunching the Java applet ,all the rest is working.- I'm login to SSL VPN Tunnel- The new window is opening I accept applet to run.He try but nothing happends the window is bank with no connect / disconnect buttons. [code] I have all the rights / permission to vpclient catalogue and files in there.I try this on root to the same error
Recently, I've been having some problems trying to play a couple games coded in Java, such as MineCraft. Every time the game loads, my internet immediately disconnects.There isn't any error dialogue or message, it simply disconnects me.Sometimes, I am able to stay on my internet connection and play the game for a short while, but most of the time, it disconnects me. I am on a wireless connection, with a router running the custom DD-WRT firmware.
View 5 Replies View Relatedis there a java download for android
View 3 Replies View RelatedASDM access to 5500 using Java was just a frustrating experience. If you manage only one device you may not notice the pain. But if you are managing multiple devices with some device 'forbidden' to update ASA firmware,
I spend few days looking at the issue and came to a conclusion and decided to post to guide all newer VPN admins who will go through the same pain and hopefully we can reduce some combined wasted time.
Recommended Beginning Setup for New Admin :
[code]...
its possible use citrix receiver for java on asa 5505 on ssl web vpn?
View 1 Replies View RelatedSo (foolishly) I let the software updater delete Java 6 (which only Apple provides), and I installed Java 7 from java.com. Was running ASDM 6.4.9, all I got was the Java 7 splash box. Updated ASDM to 6.4.9-103, same problem.
I can run ASDM in one of my VM's, but it's a pain.
I have a Cisco 501 and I can not get into the configuration menu of the Java console appears to me this script
View 4 Replies View RelatedI want to create a site with which we can share a pics?
View 2 Replies View RelatedMy macbook pro recently upgraded to the last version of java and now I can open the ASDM for my Cisco ASA 5505, when I try open, only show me the window of Java 7 ..., and don't load the ASDM.
View 15 Replies View Relatedyesterday I tried to connect to our ASA 5520 using ASDM Launcher, which has alwasy worked before. For some reason ASDM Launcher is no longer working from both my Win XP desktop and Win XP laptop. I can open ASDM through the browser but not the launcher. Both desktop and laptop have Java 7 U 6. I'm not sure if I can back rev my Java.
View 4 Replies View RelatedWe have a WEB VPN running on Cisco ASA 5510 (SW = 8.2.1 / ASDM SW = 6.2.1). There are multiple internal (Web) applications are published on it and are working. One of the Web Application is working from internal network but from outside (or internet) through Web VPN, it is getting stuck and trying to load JAVA version. It is to be mentioned here, the latter web application is required Java Version 1.4.2 while the working applications are working with Java 1.5.1.
Is it possible to mount the more than on Java version on Cisco ASDM to be worked together ?
I have just configured a ASA5505 running 8.2.2 as a webvpn server for clientless VPN connections.
I need to setup a particular bookmark for a RDP session which forces the use of the java client for those who can't seem to get the ActiveX control working for some reason or another (virus scanners/firewalls/scerutiy policies etc).
I created a bookmark as follows, but it always tries to connect with the ActiveX control first when logging on from an IE client.
rdp://192.168.1.1/?force_java=yes
I have cisco wlc 2125 and external web autherthation was configured on it. When user disable the java script in browser cisco wlc do not redirect on my external page instead of wlc show page http://1.1.1.1/login.html with cisco logo. How can i resolve this problem? How to configure wlc redirect to external web auth site with disabled java in users browser?
View 3 Replies View RelatedIm trying to configure a SR520 with the CCA, but every time I try and apply the changes to the router i get the following error.
"java.lang.nullPointerException"
Using CCA 3.0(1) and Java Version 1.6.0_16 from Sun Microsystems Inc?I assume this is an issue with Java, as like with the SDM you had to use an Old Vertion.
I urgently need to create a DCS-930L java script for a my website so that the streaming images (different from the visible images on the "my dlink service") can be viewed by visitors even if my PC is off and only router work.In the Modem/router Linksys WAG 320N I opened port 80 (port forwarding) but I can not see them on the web.
View 1 Replies View RelatedI am getting some problem with ASA WebVPN browser, in some website I cannot show links or part of the page. Is there some applet java that i cannot import in "client-server plug-ins"? I've found only java plug-in for remote access.
View 1 Replies View Relatedhow can i store urls used by the client side in the server using java
View 1 Replies View RelatedWhat type of download from Java for Acer iconia a599 tab
View 4 Replies View RelatedI have written a java server-client program. The server accepts incoming connections on port 2175 and writes responses on 2176 which the client listens on for the response. I am sending serialzed objects over the network.
Problem: This all works well if I run my client on the same machine as the server. I put together a client jar and deployed it on another machine running on the same wireless network as the server. Now I get a "ConnectionException :Connection refused". So I thought I should hardcode the server and client IP's but that still didnt work.
Question: What else would I have to do to get the two computers to talk to each other (in terms of networking not java)?
I have an ASA 5510 running ASDM 6.4(9) and Cisco Adaptive Security Appliance Software Version 8.4(4)1.I am trying to configure for the first time and I am accessing the ASA via its Management Interface.I am successfully able to connect to the device and get to the Cisco ASDM 6.4(9) page.When I try to run the startup wizard, a couple of prompts displays up to the point where the java applet runs and aks me to enter my IP, username and password.As it is a new system, password and username is blank so I enter and I get a message saying "loading software from cache" which later changes to "software Update completed" and then nothing happens.I am running MacOSX 10.7 Lion, Java version 1.6.0_33.I did try and run this on a Windows system and i was able to load the interface.
View 2 Replies View RelatedHow to control the speed and datausage for different users in wifi using java.
View 3 Replies View RelatedI got problem with RVL200, it works good on my botch mac's witch OSX 10.5,10.6 and Firefox 3.6 but stops working after last java update. The machine switch 10.5 is working because I don't update Java but the other computer is up-to-date.
Problem is with launching the Java applet ,all the rest is working.- I'm log in to SSL VPN Tunnel- The new window is opening I accept applet to run .It try but nothing happens the window is blank with no connect / disconnect buttons.
All I have is Java error:Plug-In Java 1.6.0_24JRE version 1.6.0_24-b07-334-10M3326 Java HotSpot(TM) 64-Bit Server VMjava.lang.SecurityException: [code]....
how to make the java SSH thin client applet bigger in SSL VPN Clientless portal?It works and all that but the window is literally half the size of the monitor and unworkable. You can't even hit tab! (tab moves focus around the browser...)I am using the latest java applet (Oct 2012) and ASA OS 8.4(5)
View 3 Replies View RelatedThe router 1841 is connected directly to the layer switch. the network diagram is below:
Office A --> Switch (L3) --> Router 1841 --> Internet --> Office B
However, when I transfer the file from Office A to office B, the speed very slow ( only around 40 kb/second), and there are an input error and CRC error:
Cisco-R1841#sh interfaces FA0/1
FastEthernet0/1 is up, line protocol is up
Hardware is Gt96k FE, address is 0019.e02f.03dd (bia 0019.e02f.03dd)
[Code]......