I had an odd occurrence today on my network. One particular desktop running Vista could not access secure websites (httpsremoved the DHCP lease on my server (Windows 2008), let the desktop pick up a new address and all is good nowThis is a production network (domain) environment
View 3 RepliesI work for a small company where we have a simple network that runs from one router and I believe has a switch. We all have access to the network wirelessly or with cable.The internet was running ok up until yesterday when I came in to do some online banking and thought the site was down. However, turned out it was just me that was having trouble. I coudn't access secure sites like online banking or facebook for example. Now I was using the cable at the time and this wasn't working. When I tried wirelessly it would work... this confused me but not as much as when I found out that others in the office could use the cable and even more, there are 2 others who cannot connect to secure sites with cable or wireless.I was wondering what could have changed over night as this is what seemed to happen. Is it our ISP? (prob not as others are ok) so I'm thinking there must be some kind of setup issue in our configuration. I believe we are all using dynamic IP addresses but I'm not sure if thats even relevant
View 3 Replies View RelatedI am using Comcast as an ISP and have a standalone Arris modem. I, obviously, have a DIR-655 router REV B with a firmware revision on 2.00NA. I have already turned off packet shaping and QOS. Also, I have set the firewall settings to Endpoint Independent for both TCP and UDP, and assigned static IP addresses to my computers. The problem I am having is that whenever I go to any secure websites, i.e. anything that starts with https, it takes an extraordinary long time to log in and to navigate to any webpages therein. I also cannot upload photos to a website and when I try the Speed-test.net website the download speed is OK but the upload test errors out, it doesn't connect.
View 2 Replies View RelatedHow can we host 300+ secure (https) websites using a couple of public IP's on an ASA5520 with AIP SSM-20 and with as few certificates as possible?
Summary of set-up:
We currently host a number of websites using an ASA5520 and use host headers, so have 6 servers with around 40 hosted URL's. The number of websites is due to double very soon and we will need to use more of our public IP's. We can see that we will will run out of public IP's very soon especially as there is a project in the pipeline that has a likely requirement to host an additional 200+ websites.
Each of these websites are required to use https and therefore each must have a certificate which will be very expensive. PCI DSS (payment card industry data security standard) is causing us issues because we had hoped to post the certificates on the firewall (one for each physical server) and then run the data UN-encrypted from the firewall to the relevant web servers, so that we could use one certificate for lots of websites and therefore reduce our certificate costs, however is not best practice to do this due to the data being unencrypted within the firewall and on the DMZ network and therefore potentially open to compromise. I doubt that we could install 200+ certificates on a 5520 and then re-encrypt the data to the web servers especially seeing as we also have an IPS card that is already running at around 70-80% util due to the performance overhead.
BTW - We also have an in-line Breach WAF which will be required to inspect the packets (certificates to be installed on the WAF to allow this).
I am having a problem configuring SCEP for my secure mobility client. I have created a connection profile to allow certificate requests but when I fill in the step-forwarding-url field I get an error. The CA we are using is an internal MS CA with SCEP already enabled. This has been configured for a long time with our current Cisco VPN client using certificate authentication. The ASA is running 8.4.1.Here is the error I get when I try to enter the command into the group policy associated with my certificate enrollment connection profile: group-policy SSLGP attributes. url...
View 6 Replies View RelatedThe organization that I worked for purchased large number of Cisco Secure Services Client Licenses for Windows XP. Now they have plans to move to Windows 7. Reading different discussions, I know that SSC ver 5.1 does not work with Windows 7. My questions are:
1) Will there be a new SSC for Windows 7? Will we be able to configure the pre-package for installation with the new SSC?
2) Can we use the existing SSC ver 5 licenses with the new SSC for Win 7?
We currently have an ASA 5505 Firewall with VPN services configured. The system is running ASA Version 9.0.0 and ADSDM 7.0.2. I installed the "Cisco AnyConnect Sercure Mobility Client" Version 3.1.01065 on my Windows 7 Ultimate PC. When I try to connect to my VPN service I ge the following message:
Security Warning: Untrusted VPN Server Certificate! AnyConnect cannot verify the VPN server: XXX.XXX.XX.XX
-Certifiate does not match the server name
-Certificate is from an untrusted source.
-Certificate is not identified for this purpose.
Without purchasing a certificate from a 3rd Party vendor, is it possible to register a "Self" generated Certificate to get rid of this message? If so are there any "Detailed" (e.g., simplified or not in Cisco-eeze language) instructions on how to setup the Firewall to "push" the certificate to the VPN client so the message doesn't come up for the user?
I'm running Cicso AnyConnect Secure Mobility Client v3.0.07059 for work. Attached is a sceenshot of my network connections. I'm currently hardwired on my network connection and the Cisco VPN is a virtual adapter but is shows "network cable unplugged."
View 12 Replies View RelatedVPN client 5.0.07.0410 on Windows Vista sp2 when I try to connect to my cisco 851.Secure VPN connection terminated locally by the client Reason 412 The remote peer is no longer responding.I turned on debug crypto isakmp and debug crypto ipsec no information displayed on the console.I was a lot futher before but now do not know where to turn.
View 3 Replies View RelatedI need to activate AnyConnect SecureMobility client on an IPAD. I have an ASA with the below feature licenses:
[code]...
This platform has an ASA 5520 VPN Plus license
As I've understood that I need the ASA-AC-M-5520 license for each IPAD used but they mentioned that we need also the Essential or premium license to be activated on the ASA as well. As shown above, I have the "VPN Plus license" activated on the firewall.
Will the RV042 work with theAnyConnect Secure Mobility Client app? If so, is there and app note available? If not, which routers wil work with this app?
View 5 Replies View RelatedHere is the pertinent information first...
Windows 7
Cisco AnyConnect SecureMobility Client 3.0.4235
Cisco ASA 5510 firewall 8.2
The problem is.....When I log in, the client does its start-up bit, and then displays a "This certificate is intended for the following purpose(s):" message. If I decline the certificate, it gives me the error message shown in the image, but I can otherwise continue and establish my VPNs with no problem.
Unfortunately, the certificate it selects has nothing to do with my organization ( in fact, the certificate is for "*.whitepages.com" - see images). To make matters worse, I can not find this referenced certificate anywhere under my user context in Windows.
I have tried removing, rebooting, and re-installing - it does no good.How do I force the client to stop using this incorrect certificate, and to at least use one that belongs to my organization?
Windows clients work fine. When loaced from safari in Mac OS, it also works fine. -- If I browse to the url, like vpn.xxx.com/profilename, I can login and anyconnect will start and connect automatically. Only when run from applications > Cisco > Cisco Anyconnect Secure Mobility Client, I will get this failure. Is this a configuration issue?
View 1 Replies View RelatedWe are using an ASA 5520, running 8.4(3). We have users running the AnyConnect Secure Mobility Client 3.1.02026. I have the AnyConnect connection profile configured to authenticate users using LDAP over SSL. I enabled the password management and am able to get password change prompts to appear in the AnyConnect client. However, new passwords are rejected and changing passwords through that prompt does not work. I'm not sure what the cause of the problem is, since LDAP over SSL is enabled and working, which is required for the password management feature
View 9 Replies View RelatedI have a Pix 515E with a VPN setup. I recently tried to connect Cisco VPN Client and get the following error: "Secure VPN Connection terminated locally by the client. Reason 412: The remote peer is no longer responding" I have previously been able to connect to this VPN using Cisco VPN Client without issue. Below is a copy of my config and VPN Client log & debug logs from Pix. We have Newwave Communications Cable internet, which i just found out the the ISP has recently implemented DOCSIS 3.0. (i'm not sure if that matters).
*******************************************************************************************************************************************
pix1(config)# sh run
: Saved
:
PIX Version 6.3(4)
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
[code]....
I am trying to configure interface vlan1 to get an ip address from dhcp by entering the commnad ip address dhcp ios rejects the dhcp portion of my command as not recognised although it is referred to in Cisco manuals.my IOS version is c2950-i6k2l2q4-mz.121-22.EA14.bin.I get the same problem when I try to configure ip http secure-server on the switch. Is this a known bug or whether I have the correct IOS version for these commands?
View 6 Replies View RelatedWhen setting up my e1000 router for a secure domain it automatically opened a non secure one that my neighbors are using. How can I cancel it?
View 2 Replies View RelatedI am trying to access some websites and unable to do so
View 2 Replies View RelatedWhen clicking the Internet Explorer icon it won't open ANY webpage. My Internet connection works perfectly. My other computers are fine.
View 1 Replies View Related[url]...
I'm in Indore (India), whereas my friend from Mumbai can access them both.Also my ISP is Airtel.
Getting a message along the lines of: can't access this website when accessing certain websites such as the BBC and my university's intranet as well as random websites, also I can't access things like the online content on games such as far cry 3 or saints row 3.I've tried rebooting the router, I've tried the command prompt tracert, I've tried getting on other browsers with no avail and I've tried the other computers in my house and they've been getting on fine, tried full antivirus and malware scans and I've tried checking my firewall settings.
View 1 Replies View RelatedI see the router and the modem are working just fine as usual and even the guy from comcast says there is nothing wrong with the internet connection itself.The problems I am having right now are
- I can only access to Facebook, Spotify, but nothing else.
- It sometimes randomly comes back and everything works but then it only lasts for a few minutes-hours and it goes off and won't work again. I've tried resetting the modem, router, and I even tried creating a new network but nothing worked out so far.I currently own a mac and a windows 7 laptop.
I have an XP machine that i am not access websites from. the machine is hardwired into a router, the other computers connected to the router(wifi) are able to get access websites without issue.here are the steps i have taken and the things i know so far.im pulling a valid ip address, with correct dns/gateway all that good stuff
able to ping other machines on the network, pings the router, and able to ping google.com(so i know there is connection between me and the internet, and that dns is working)
installed firefox to see if it was a problem with IE, no go.took a look at the active process and looked up anything that wasnt familiar, that seems to be good.virus scan with avast came up clean, avast is able to connect to its database and pull the most current virus defs.
there isnt a firewall, the only security measures on the computer is avast.
I cannot access any microsoft websites except when in safe mode + networking. I can browse all other websites just fine, but can only access any microsoft sites in safe mode.
View 3 Replies View RelatedOver the past few months I've noticed that, although my USB adapter picks up a good signal from the router (never less than 65 - 70% signal strength) and stays connected to it I am at times unable to access any websites. It started off happening once or twice a week and could happen for about 5 - 10 minutes at a time but now happens several times a day and can stop me accessing the web even though the USB adapter says that it is still picking up the signal from the router. After a period of time it will just start working again, I don't have to restart the router or anything.I've tried changing the channel to a few different ones after using a utility to see what my neighbours were using but this hasn't made a difference. I'm using a Netgear RangeMax Dual Band Wireless-N USB Adapter. It has the N technology so should work pretty well.The current firmware version is 1.00VG dated 5th May 2009. In the router settings it allows you to search for an update for the firmware however it told me that my current version is the most up to date.
View 7 Replies View RelatedI have a PIX 501 with 6.2 FW. The firewall inside network is connected to a Windows server (Mailserver). I can get access to most websites on all clients as well as on the server. However, there are some particular websites, such as facebook.com that the server and all but one client cannot access. I get a "cannot display the webpage" in internet explorer.
I have disabled the Windows firewall and AV. I have also scanned for any malware and no malware was found.
I found on the forums a "fixup protocol dns" solution, but my PIX version does not support it.
Below is my config:
PIX Version 6.2(2)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
[Code]......
i WANT Making Wireless access secure
View 1 Replies View RelatedMy problem is that after configuring my router's settings. I can't go to any websites other than the configuration page. I'm completely frustrated for days.icrosoft Windows XP [Version 5.1.2600]C) Copyright 1985-2001 Microsoft Corp.C:Documents and SettingsLe>ipconfig/all[CODE]
View 10 Replies View RelatedI've been having a really annoying issue with my computer not connecting to the internet wirelessly I start the computer, and a connection is there via my router for about 30secs-2mins. After this, I can't access any websites. The full five bars remain white and the router is still seen by the computer, but there is a small yellow exclamation sign in front of it, and a mouse-over says "no internet access". I can still access when wired to the router through a cable, so I thought it might be an issue with my wireless card, but wireless USB adapters don't make a difference, even when I've disabled the wireless card. My drivers are all up to date, and I've even tried a full reformat and reinstall of Windows 7, to no avail. Other devices (a couple of computers and phones) can connect to the router fine, and the network even tried a new router, with no success. I have experienced this immediately after the reinstall, before either firewall (I use ZoneAlarm Free) or AV (I use Avast! Free) were installed, and I'm completely stuck.
View 19 Replies View RelatedI've installed aDIR655 for my friend's cafe and found that Clients ( both wired and WIFI ) have difficulties accessing Yahoo and MSN while Googles etc ( and other Newspaper and webmail sites are OK ) is fine.....I tried to reload and reboot and re-config etc but all in vain...
View 1 Replies View RelatedWhen I moved in to my roommate's house, her computer was already set up with an unsecured wireless network listed as Open and Disabled requiring no password. All of a sudden, it now has a lock next to the name in the list of wireless networks and asks me for a password when I try to connect. My roommate knows NOTHING about computers and has no idea how it happened. She has an Arris modem, Windows 7. I tried typing in the common IP address for Arris and I did get to a screen giving a lot of info about the system. But there was no where to log in or change any passwords.
View 9 Replies View RelatedIv tried about everything you can find when you google things about not being able to access a particular website but none work checking out all security settings, deleting all cache, disabling security, checking date and time, flushdns, use opendns, try other devices (not one device in my household can get to https pages on this one site), making sure root certificates are updated, bypassing router, unplugging internet and router to ''reset'', trouble shooting with isp, website, ssl issuer, other wildblue users, other website users, other tech forum, checking for virus and malware and I'm sure there's more that I can't recall at the moment. I am not the only user of this website with a problem and all us having a problem have satellite internet (different providers), however not everyone with my satellite internet (wildblue thru dishnetwork) has this problem as I have asked here...some do some don't Wildblue ''blocking'' a website's ssl? - WildBlueWorld.com Forums
I can go to the website toontown.com but I can not access any pages that are ''secure'' or https. Can't login and using satellite internet?
Like others I see on this board, we've got middle- and high-school age kids whose access to FB and other sites needs to be controlled/scheduled.
I thought the DIR-655 was great, in that it has features that, on the face of it, would seem to be ideal for blocking domains and restricting access.
My problem: I've never been able to get this to work.
I've set up schedules and created lists of domains that I want to limit access to according to the schedules, but the only constraint I've ever gotten to stick is blocking access completely to the router.
*None* of the schedule-based or website-based access controls have ever worked; I'll put the block in place to my daughter's computer's MAC address so she shouldn't be able to get to youtube or facebook, save, bounce the router, but then I go by her room and she's still busily chatting away online to her FB friends.
Based on similar posts I've seen on this forum, this may not be a unique problem.
So in a nutshell, this is what I want to do:
1) Block certain computers (identifiable by MAC address)
2) from being able to get to particular named domains (and any of their sub-domains)
3) according to a schedule that I can create and modify.
My preference would be to do this in the router, but again, responses I've seen here suggest that may not be possible.