Cisco ASA to Fortigate VPN (Properly!)
Dec14

Cisco ASA to Fortigate VPN (Properly!)

KB ID 0001721 Problem A while ago I did a run through on site to site VPNs from Cisco ASA to Fortigate firewalls. Back then I said that the default settings were a bit ‘shoddy’ and that I’d revisit it once I had more time. What do you mean shoddy? Well, Cisco and Fortinet are both guilty of enabling ‘Everything’ to make the tunnel come up, so people can just use a wizard and not put to much thought into...

Read More
VMware Edge Gateway VPN to Cisco ASA
Feb18

VMware Edge Gateway VPN to Cisco ASA

KB ID 0001658 Problem I was asked to setup a VPN to help out a colleague this week. When I had a look, one end turned out to be an Edge Gateway, I wasn’t that concerned, I’d done similar things in my prior role, I just didn’t have access to the vCloud or VMware at this datacenter. Depite my best efforts on the ASA, the tunnel refused to come up, it took a little looking ‘under the covers’ to accurately...

Read More
Firefox Error – SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY
May21

Firefox Error – SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY

KB ID 0001189  Problem Firefox is what I use when Opera does not work, so when I tried to connect to some management servers that did not support Opera this happened;   Secure Connection Failed An error occurred during a connection to {FQDN). SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY)   Solution Navigate to ‘about:config’...

Read More
Cisco ASA Site to Site VPN’sSite to Site ISAKMP VPN (Main Mode)
Nov17

Cisco ASA Site to Site VPN’sSite to Site ISAKMP VPN (Main Mode)

KB ID 0000213 Problem As with most things, before you have a hope of fixing something, you will stand a better chance if you know how it works in the first place. Below is a quick run though of what’s happening with your site to site VPN’s and how they work. For the entire process we will have two Cisco ASA 5500 firewalls and a site to site VPN. Solution What’s an Initiator and a Responder? 1. Our Laptop 192.168.1.50...

Read More