Azure VPN: Point To Site VPN (Remote Access)
Aug05

Azure VPN: Point To Site VPN (Remote Access)

KB ID 0001692 Problem Given my background I’m usually more comfortable connecting to Azure with a Route Based VPN from a hardware device, like a Cisco ASA. I got an email this afternoon, a client had a server in a private cloud and a server in Azure, they needed to transfer files from the Azure server to the server in the private cloud. Now on further investigation this client had a Cisco vASA so a VPN was the best option for...

Read More
Cisco PRSM – Replace the Certificate Using Microsoft Certificate Services
Nov17

Cisco PRSM – Replace the Certificate Using Microsoft Certificate Services

KB ID 0001023  Problem Cisco PRSM gives you the ability to import certificates into it, but like other Linux distros does not give you the tools to generate the actual certificate request. The documentation tells you to use OpenSSL to this. I was just about to fire up a CentOS box when I remembered I did something similar for VMware 5.5 not so long ago, would the same procedure work here? Yes it did, and it’s a lot easier than...

Read More
Cisco ISE – Replace the Self Signed Certificate
Nov17

Cisco ISE – Replace the Self Signed Certificate

KB ID 0001068  Problem Cisco ISE arms itself with a self generated certificate out of the box, (well the NFR appliance does anyway). To replace that cert with one signed by your own CA, this is the procedure. (Note: I’m using Microsoft Certificate Services on Server 2012 R2). Solution Step 1: Import the CA Certificate into ISE Note: If you have a lot issuing servers it’s a good idea the repeat this procedure for EVERY...

Read More
Cisco ASA 5500 – Using a Third Party Digital Certificate
Nov17

Cisco ASA 5500 – Using a Third Party Digital Certificate

(For Identification, AnyConnect, and SSL VPN) KB ID 0000694 Problem A client asked me how to do this, so off I went to the test bench to work it out. Note: I’m this example In going to submit the request to, and issue the certificate from, my own windows domain certificate authority, you would send your request to a third party certificate authority, here’s a direct link to the certificate type you require. To use your own...

Read More