Cisco ASA: Setting up anyconnect vpn with SSL and IPsec

Introduction This post demonstrates how to set up anyconnect vpn for your mobile devices. In this post I am using an android mobile phone and downloaded anyconnect ICS+. Cisco ASA software version 9.1(4), ASDM version 7.1, with anyconnect essential license and anyconnect for mobile license. This demonstration will configure IPsec and SSL remote access VPN, … Continue reading Cisco ASA: Setting up anyconnect vpn with SSL and IPsec

ASA5505 (ASA8.4): Block MSN and Yahoo IM

I bumped into a youtube demo instructing people how to block instant messenger, I did not watch the entire demo but searched for resource, I found the cisco documentation which documented the process. Capture IM traffic Create ACL of the interesting traffic This is necessary to apply the inspection policy. Create a class to capture … Continue reading ASA5505 (ASA8.4): Block MSN and Yahoo IM

ASA5505: Allow web surfing but disallow download with websense

I realized I have under utilized my ASA5505 at home, I actually ignored the fact that it can do layer7 inspection as well. I bumped into a post in Cisco support forum where a user requested "step-by-step configuration" to block user to download from the web. I had never done it before, so I searched … Continue reading ASA5505: Allow web surfing but disallow download with websense

ASA5505 8.4(3)9: Quick start to connect to your internet

This is not a guide, but a documentation to quickly start using the net, your computers that access internet are inside hosts, the hosts in the internet are outside hosts. The equipment for this documentation is ASA5505 with 8.4(3)9 software, base license can utilize this quick start documentation as well. Create vlans You need to … Continue reading ASA5505 8.4(3)9: Quick start to connect to your internet

Firewall: Configuring Active/Standby failover using ASA5505 pair.

ASA5505 security plus license 1. Support stateless Active/Standby failover. 2. Support unrestricted dmz. Version used for this lab is 8.2(1) Placement recommendation You can choose to connect a cable to connect the ASA5505 pair directly. However if the link between the ASA5505 fails, both ASA5505 will sense their own switchport fails. A more recommended way … Continue reading Firewall: Configuring Active/Standby failover using ASA5505 pair.

Security: Site-to-site vpn with ASA5505 and 2651XM

Verify connectivity before setting up vpn 2651-3#ping 192.168.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms ciscoasa(config)# ping 192.168.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: … Continue reading Security: Site-to-site vpn with ASA5505 and 2651XM

Upgrading ASA from 7.2(4) to 8.2(1)

Upgrading ASA from 7.2(4) to 8.2(1) by Cyrus Lok on Thursday, April 8, 2010 at 8:33pm Verify free disk space, ASA flash allows multiple copies of image files to be loaded as long as it has sufficient space. ciscoasa# dir flash: Directory of disk0:/ 6 -rw- 8515584 08:42:32 Dec 11 2009 asa724-k8.bin 7 -rw- 4181246 … Continue reading Upgrading ASA from 7.2(4) to 8.2(1)