Cisco ASA ASDM – Packet Tracer Wont Work
Nov17

Cisco ASA ASDM – Packet Tracer Wont Work

KB ID 0001051  Problem I don’t usually use the graphical packet tracer tool, but I did this week, and this happened; Following error(s) occurred- packet-tracer input inside {protocol} inline-tag -l {source} {source port} {target} {target port} xml %Invalid input detected at ‘^’ marker Solution Well from CLI it worked fine, so I’m guessing it’s a fault in the ASDM. An Internet/forum search threw up a load...

Read More
Cisco ASA5500 Change the AnyConnect Port
Nov17

Cisco ASA5500 Change the AnyConnect Port

KB ID 0000422  Problem AnyConnect runs over TCP port 443 (That’s HTTPS/SSL), but if you only have one public IP and need to forward that port to a web server or internal host then you are a bit snookered. You can of course change the port that AnyConnect runs over, so that it’s no longer on TCP port 443. Why you would NOT want to do this. Bear in mind that https is a well known port, and its open in most places for secure...

Read More
Cisco AnyConnect – PAT External VPN Pool To An Inside Address
Nov17

Cisco AnyConnect – PAT External VPN Pool To An Inside Address

KB ID 0001104  Problem I got sent to Holland this week to look at a firewall deployment, and while I was sat in the Airport, I was going over the job I had to do, when I realised the solution I had suggested had a problem see below; My brief was to provide remote AnyConnect VPN into the network so the client could get their network setup, and manage things remotely. However as I drew the network out in my head I realised that the...

Read More