Cisco ASA No Debug Output?
KB ID 0001477 Problem I see this get asked in forums A LOT, typically the poster has another problem they are trying to fix, someone has asked them to debug the problem and they cant see any debug output. Solution Firstly you need to understand what logging is, and how debugging fits within it. (Bear with me, this is good knowledge to have). The firewall saves logs in syslog format, and there are 8 Levels of logs, the one with the...
ASA Connection Error: ‘The First Key-Exchange Algorithm’
KB ID 0001476 Problem When attempting to connect to a Cisco ASA firewall via SSH you see the following error; The first key-exchange algorithm supported by the server is diffie-hellman-group1-sha1, which is below the configured warning threshold. Do you want to continue with this connection? Clicking ‘Yes’ will let you connect. Solution When connected, execute the following commands; conf t ssh key-exchange group...
Cisco AnyConnect With Server 2016 NPAS (RADIUS) Different Groups
KB ID 0001474 Problem A few years ago I replaced a firewall that was setup like this, and while it took me a while to work out what was going on, I remember thinking it was an elegant solution. Fast forward to today, and I’m now working with the guy who set it up! (Kudos to Paul White). So when I had a client with a similar requirement, I sat down fired up the lab, and documented it. What was used; Windows 10 Remote Client...
Connecting to and Managing Cisco Firewalls
Also see “Allow Remote Management” KB ID 0000075 Problem To connect to and manage a Cisco firewall you need three things, To be in possession of a password, (and in some cases a username). Have the ‘Method of Access granted to you’ (or have physical access to the firewall). Know a ‘Method of Access’ to the firewall for management. Cisco Firewall Passwords Unless your firewall is brand new (in which...
Cisco Firewalls and PING
KB ID 0000351 Problem With regards to Ping, out of the box a Cisco firewall will allow you to ping the interface you are connected to, so in a normal setup inside clients can ping the inside interface, and the firewalls outside interface can be pinged from outside. OK – to understand pinging through a Cisco Firewall you need to understand that Ping is part of the ICMP protocol suite, and unlike other protocols is not “connection...