we noticed that the Cisco Secure Desktop / Hostscan is not working with Internet Explorer 10 on Windows7/Windows8.
As described here, the SSL VPN is/should working but no documentation about Cisco Secure Desktop / Hostscan. url...It's a Cisco ASA5520 with the lates release.
- ASA Version 9.1(2)
- ASDM 7.1(3)
- Cisco Secure Desktop csd_3.6.6249-k9.pkg
- Hostscan hostscan_3.1.03104-k9.pkg
Is Cisco secure desktop free and available for download on Cisco's download site? Is host scan part of the package? I just purchased an AnyConnect license for my ASA (ASA5500-SSL-250=) and would like to know how to get Cisco Secure desktop and more specifically if host scan comes with CSD.
View 1 Replies View RelatedWhat benefits does the Cisco Secure Desktop bring to customers running ASA5500-SSL-250= user license on the ASA? This is not Anyconnect. This is just regular clientless SSL VPN. I am particularly interested in anti-virus/anti-spyware compliance. Is this available with the base version of CSD? How does this endpoint control work? Can endpoint control detect that an O/S antivirus is not up to date and then block this device from accessing the VPN? If it can, how is this configured? note I am not asking about the additional Advanced endpoint control license. Just basic Cisco Secure Desktop download.
View 1 Replies View Relatedwe have just done 2 upgrades on our asa 5510...
1. we upgraded our 5510 ASA firmware from 6.21 to 6.41
2. we also upgraded to the latest csd package (we have upgraded from 3.5.841 to 3.5.2008)
after 2 reloads, it seems that all my prelogin policies are gone ,i try enable / disable CSD and it just don't go back...i only have the default policy
what can i do to bring them back ?
My customer has 1000 SSL VPN users license on ASA5540 and i want to know the impact of deploying secure desktop on the ASA resources "processor , memory ... etc)
View 1 Replies View RelatedHow to secure router on my mac - neighbor tapping into my internet service. How do I secure my Linksys router so only my laptop, desktop and iPad can use it? I tried going to 192.168.1.1 but got nothing?
View 5 Replies View RelatedI'm trying to setup the SSL VPN portal:When I connect via HTTPS to the ASA5520 outside interface I get the login prompt and after successfully login it takes me directly to the Anyconnect client download (starts Anyconnect immediately) even though in the group policy is configured to not prompt the use to chose the post login and the post login is ste to go to Clientless SSL VPN Portal?
View 7 Replies View RelatedWe have a Cisco ASA 5510 with Clientless SSL VPN portal. I just found that after installing the last Microsoft Updates, RDP bookmarks stopped working. It keeps asking that I should install Cisco Portforwarder control, and then goes back to the home page. I changed all security settings, tried to install the control manually, but nothing works. Finally, I found that after uninstalling Internet Explorer 8 update KB2675157 it works again.
View 7 Replies View RelatedAttempting to upgrade from ASA 8.3.2, ASDM 6.3.4, Any Connect 2.5.1 to ASA 8.4(4)1, ASDM 6.4(9) and Any Connect 3.1.00495 using ASA 5505.
Client is Windows XP SP3 w/ IE7. Can log into the ASA web portal and starts to install via ActiveX. I get past the IE7 message bar to authorize installing the ActiveX control. I briefly see a message that says "ActiveX could not be launched" (I think. It is very fast) and then the install hangs w/ the message in the web connect dialog about the IE7 message bar. If I let the timer expire, the java install also fails. If I download the installer via the web portal, and install Any Connect via the downloaded installer, everything works fine.
Same problem w/ ASA 9.1.1, ASDM 7.1(1) and Any Connect 3.1.02026. I have added the web page address to the trusted zone, and checked all the zones for permissions to install ActiveX controls, etc. Worked w/ the older/original software when I remove the kill bit for Microsoft KB2736233. Have not installed any custom Any Connect profile to use transforms. I did see in the release notes some information on NO INSTALL ACTIVEX=0, but I think this applies to the per-install package only.
I'm trying to configure an ASA 5520 with cut-through proxy feature. The user is required to be authenticated when trying to access an outside resource from the inside. This is a test lab before it is implemented in production. [code]
View 15 Replies View RelatedI have a cisco ASA5520 box running with IOS version8.2(5)13 where default policy map is applied globally. But I have not seen any traffic being inspected through included protocol defined under policy map.All configuration seems to be ok for me.
service-policy global_policy global
Global policy:
Service-policy: global_policy
Class-map: inspection_default
Inspect: ftp, packet 0, drop 0, reset-drop 0
[code]....
I can no longer SSH to a primary active firewall. It had all of a sudden stopped working. However I am able to SSH to the secondary standby firewall without any problems. I did try to regenerate the RSA key on the primary fw, but still unable to connect. The only way I can connect to it is by using telnet.
I ran the "show asp table socket" command and I'm seeing port 22 listening on the primary IP address (not the standby), foreign address is 0.0.0.0:*. I did a packet capture on port 22 on the inside inside, seeing my request hit the fw and then right away a reset back from the fw.
version 8.2.(5)
model ASA5520
I'm hitting a bug in the software version I'm running? Or what else can I check before rebooting the primary fw?
I set up Anyconnect on ASA5510 and enabled secure connect in CUCM. I did everything as written in jabber for android administration guide and end user guide. But when secure connect configured on my mobile, secure connect entry never created even though I entered all correct parameters such as gateway address, authentication group, username and password. Provided that jabber is working fine internally
ASA log says:
SVC message: 16/NOTICE: The user has requested to disconnect the connection.
SVC closing connection: User Requested.
WebVPN session terminated: User Requested.
I succeeded in connecting via Anyconnect app on iPhone. So I believe Anyconnect Vpn connection has no problem. License checked.
Anybody succeeded in implementing secure connect using AAA authentication?
Forum member RDK graciously took the time to develop a tutorial for Setting up a user defined web page to show DLink DCS-930L/932L camera images using the DLink ActiveX control.
View 2 Replies View Relatedinternet is working with the client except for gmail account using outlook 2010.
View 1 Replies View RelatedI've recently migrated a PIX 525 to ASA 5520, but for some reason (through ASA) the users from OUTSIDE aren't able access services published in DMZ as well as some DMZ servers aren't able to communicate to some OUTSIDE services.
-INSIDE to DMZ is working fine. (through ASA)
-INSIDE to OUTSIDE is working fine. (through ASA)
Below is the configuration from my PIX (where everything works just fine) as well as the one on the ASA (where there is a problem), what could be the cause?In the below case the DMZ hosts from 11.1.10.0 aren't able to access SMTP services (through ASA) and the OUTSIDE users aren't able to access DMZ web server (11.1.10.40) through ASA, this all just works fine with PIX.
object-group network inside_subnet_all network-object object inside_subnet_a network-object object inside_subnet_b network-object object inside_subnet_c network-object object inside_subnet_d network-object object inside_subnet_e network-object object inside_subnet_f network-object object inside_subnet_g network-object object inside_subnet_.access-list OUTSIDE extended permit tcp any object host-11.1.10.40 object- group WWW-HTTPS access-list DMZ extended permit object SMTP object dmz_subnet any access-list INSIDE extended permit ip
I have an ASA5520 with mobile VPN Ipsec.The "splitTunnelAcl" set the group is not working.
View 7 Replies View Relatedi have configured remote access VPN to cisco ASA 5520, Cisco vpn client is connecting fine and both phases are coming up but ipsec phase packets are not encapsulating. and ima not able reach the remote subnets 192.168.10.0 and 192.168.180.0. [code]
View 4 Replies View RelatedI have a Cisco ASA5520 that I have setup to allow a GRE tunnel through from a router at site B. This all works fine when I use the below NAT with associated router object on the inside
object network SWTEST nat (inside,outside) static interface
My problem comes in that this kills off my Cleintless VPN connection to the same firewall, I changed my NAT to point at another of my statically assigned IP addresses, and then nothing works. Can anyone help with what I've done wrong, or what i should do? My rule base allows any GRE in from the source, and rules all look fine.
When setting up my e1000 router for a secure domain it automatically opened a non secure one that my neighbors are using. How can I cancel it?
View 2 Replies View RelatedOur firewall expert has gone off on long term illness leave and I am trying to pick up the pieces :-(
We have an ASA 5520 (local office) talking to another ASA (remote office) via a VPN Tunnel.
My 1st problem is that I cannot ping from my inside network (local) to the outside interface of my remote ASA.
My 2nd is that I have debug enabled on my rules but am not logging anything.
So i'm trying to set up remote desktop connection for my desktop at (xp pro, sp2).
I've went through all the steps:
- allowed users to connect remotely (system properties)
- added to firewall exceptions
- opened up port 3389
I've disabled firewall and virus protection for now as well to test.
It works fine when I try connecting from my laptop at home by opening up the remote desktop program, and entering the local static ip address that i've configured on the desktop (i.e. 192.168.x.x);
however, when I try to connect outside of this network (on the road or office), I can't seem to connect (yes, I replaced the ip 192.168.x.x with the public ip of the desktop which I got from whatsmyip.org). I also can't ping the public ip of the desktop (can only ping the 192.168.x.x ip of the desktop)
Again, router port is open to port 3389, firewall is turned off on both the desktop and laptop, and virus protection is off.
I plugged in the USB from the Modem to my desktop and my desktop doesn't see the modem, I don't want the router to my desktop because it is interferring with my magicjack
View 3 Replies View RelatedMy computer stopped being able to Remote Desktop to my server on my network. My backup software also doesn't recognize my server. But, I can access its folders using Windows Explorer. Any other PC on the network can remote desktop to the server and connect. What happened to my machine? This message appears when i try to connect: "Remote Desktop can't connect to the remote computer for one of the following reasons:
1) Remote access tot he server is not enabled
2) The remote computer is turned off
3)The remote computer is not available on the network
Make sure the remote computer is turned on and connected to the network, and that remote access is enabled."
My computer is:
AMD: Athlon 64 X2 5200+ 2991 MHz
Mobo: Gigabyte M57SLI-S4 v.2
RAM: 4GB Mushkin DDR2 PC2-6400
OS: Win 7 64bit
VC: Geforce GTX 470
I've been happily using a desktop PC wired into a router (using an ethernet cable) as well as a laptop that connects wirelessly to the router. This setup has been working fine since I started with it a few weeks ago.
On Friday evening the desktop PC stopped being able to connect to the internet and hasn't been working since. The laptop is able to connect fine wirelessly.
The router light seems to indicate that the ethernet connection is ok. I've tried connecting wirelessly from the desktop PC but that doesn't work either - the Netgear wireless usb adaptor won't open from within Windows as it usually would do.
Nothing has changed to the hardware setup (I've checked all connections) so I wonder if this is a software problem caused by a virus or maybe by Windows updates?
Attempts to run remote desktop client a laptop on a tower using a CAT 5 Crossover isn't working. After starting the remote desktop on the laptop, I'm asked to identify the other computer, which I do, and a remote desktop window with a black background pops up, as expected. But I expect an opportunity to login will be displayed after a second or so. That never happens. After about a minute this pops up:Remote Desktop Disconnected?Your Remote Desktop session has ended.The connection to the remote computer was lost, possibly due to network connectivity problems. Try connecting to the remote computer again. If the problem continues, contact your network administrator or technical support.
My clients are impressed with my ability to setup their networks, Linksys routers with WIFI. But toss something unfamiliar into the mix, like this situation, and I'm pretty lost, pretty quick.
Environment:
Hospital's WIFI.
Laptop running XP Home with WIFI and Ethernet.
Tower running Win 7 Ultra with Ethernet.
Cat 5 crossover cable.
Goal:Configure laptop to access Hospital's WIFI. This is successful, I'm using it to post this. Configure laptop run a remote desktop with the tower as the server. The tower, running Win 7, has no monitor. I don't have a flat screen monitor, and didn't feel like dragging an 80 pound 24 inch Nokia into the hospital.After reading some sites while trying to figure this out, I gave the laptop the same group name, workgroup, as the tower.In my experience, starting the tower has been, turn it on, and it boots to Win 7. But I can't watch that happen without a monitor. I can't configure the the tower's network connections without a monitor either.I purchased the CAT 5 crossover cable yesterday, for this occasion. The label on the plastic bag it was packaged in had the word "Crossover" on it. I connect the CAT 5 to the laptop's single ethernet connection, and to the tower's Intel pro card. At home the laptop is on WIFI, the tower connects to the router.
recently my network adapter just stopped working. The wifi signal was really bad so i unplugged it and when i plugged it back in it doesnt even turn on. I've reinstalled the drivers and still it doesn't turn on. In device manager there is a yellow exclamation mark next to it and when i click on properties it says code 10. I used it on my laptop and it turns on but when i plug it in my desktop it doesn't seem to turn on.
View 1 Replies View RelatedI'm trying to use RDC to connect to my home PC from work. I've tested everything on my laptop from another network and the connection works fine but the same settings don't seem to work when I'm at work.
I'm pretty sure I have everything set up correctly. Using the default port forwarded to the desired computer.
I use RDP extensively on my LAN to use and manage 4 PCs running Win XP or Win7. My consumer-grade Cisco Linksys WRT610n crapped out after less than 2 years, so I thought I'd try the Cisco WRVS4400N to gain extra features like VPN. I have not enabled anything new on the router except for adding a second wireless SSID for guest use, although no bandwidth management or VLANs have been set up yet. Firmware version is 2.0.0.8.Since installing this router I have been unable to use Windows RDP on ANY of my computers on the LAN, whether I use the machine name or the IP address. I can ping every device on my network - print servers, NAS boxes, PCs, but no RDP. WHAT'S GOING ON?
View 6 Replies View RelatedMy Internet connection works completely fine when all I have is my laptop connected to the wifi, but when my desktop also connects to the internet, than my laptop's internet doesn't work at all until i shut the desktop down.
View 2 Replies View RelatedI have a HP desktop Pavilion p6531 p-b (Windows 7) that is hardwired to a Linksys 2500 Router. Internet worked fine until this morning where it can't connect at all. It can pick up the Wireless connection from the router but I can't get it to go online even wirelessly (although I am not sure if I'm doing that part right). I called my ISP and they reset the modem, etc as well as bypassing the router and we still cannot connect to the web. We looked at the Network Center and made sure that in the Local Area Connection, the Internet Protocol Version properties all have "Obtain address" and "Obtain DNS server" automatically checked. At that point their tech support was stumped.
View 6 Replies View RelatedI'm running Windows 7 on my desktop, and I've had problems since yesterday with my pc. My Vista notebook, ipad3, ipod touch, android based phone and blackberry are all able to connect to the wifi, but my desktop is unable to connect to the wifi or ethernet. Things were working fine until yesterday, when I had to power cycle, after which the desktop connection stopped, though other devices are working fine. My ipconfig details are as follows:
Windows IP Configuration Host Name . . . . . . . . . . . . : DELL-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : reliancebroadband.co.in
[code]...
Background info:
Comcast cable internet and TV
Regular modem
Linksys WRT54G router
Windows7 desktop
The problem I'm seeing is that our wireless connection cuts out about 5 minutes after turning on our main desktop. Turn off the main desktop and wireless begins to work again. Throughout all of this, the wired connection works fine, and I have no problem connecting to the router either.