ISAKMP (IKE Phase 1) Status Messages MM_WAIT_MSG To establish Phase 1 of a IKE VPN, 6 messages need to be sent between the 2 peers before it can complete. Sometimes when you try to establish a VPN, you will see that the VPN gets stuck at one of these MM_WAIT_MSGs. Read more…
VPN Troubleshoot (IKEv1 Site to Site) When troubleshooting VPNs, the easiest way to figure out what is wrong with the VPN is to have the other side send traffic. This will allow you to narrow down their settings, assuming that the remote side has their side configured correctly and has Read more…
ASA Route Based VPN The ASA only performed Policy Based VPNs prior to 9.7 code which can cause a lot of issues when connecting to other vendors. If you are running 9.7+, you will now be able to create a proper Route Based VPN which will allow you to connect Read more…
Different NAT Types There are three types of NAT on the ASA which have different processing orders and functions. To understand the different ASA NAT types, we should first go over the the different types of NAT in general. General Types of NAT Static NAT—A consistent mapping between a real Read more…
The ASA Data Sheet can also be a little misleading so read carefully. You will see that Stateful Inspection throughput appears twice for each device. The one you should look at is Multi Protocol and not Max. Max is for UDP traffic only and not TCP packets which nearly every Read more…
In this Article, we will be breaking down the right questions to ask when configuring a VPN and how to configure a Site to Site on the ASA. ASA Version The configuration of the Site to Site will be presented in different variations at the end of this Article. Read more…
AnyConnect SBL is to allow users to connect to the VPN before signing into their Laptop/Desktop. This is useful for companies that want all of their Laptops to use Active Directory to sign into the laptop but need a secure way to reach the AD Server. AnyConnect SBL Requirements Must Read more…
