Posted by: Rob Chee
on Feb 10, 2009
One of the great features about the Cisco AnyConnect VPN client is auto reconnect. This feature automatically reconnects a VPN session if the users internet connectivity drops. This means that if a user is connected to the VPN and the user's computer is accidentally unplugged, the VPN connection will be automatically reestablished when the computer is plugged back in. Another example would be a similar situation when a 3G wireless connection drops. If using the IPSec VPN client, a temporary loss of signal would cause the VPN connection to drop. With the AnyConnect VPN client, the VPN connection would be automatically reestablished.
Posted by: Rob Chee
on Feb 9, 2009
The Cisco Security Agent Management Center (CSA MC) provides the central management for CSA. The Agents check in with the CSA MC to make sure they have the latest policy and version of software. For this reason, it is important that the CSA MC be a stable server that is always operational with the same IP address and name. Unfortunately, there may be unavoidable instances where the CSA MC must be moved to a new server with a different IP and name. This guide will go through how to move the CSA MC application and database to a new server and migrate the Agents, running on the end computers, to use the new CSA MC.
Posted by: Rob Chee
on Feb 8, 2009
One excellent command for viewing ASA SNMP OIDs is "show snmp-server oidlist". It appears that this is a hidden command, based on the
ASA 8.0 Reference Guide. This command provides information on the OID and name associated with it. I've included an example below:
Posted by: Rob Chee
on Feb 2, 2009
Cisco NAC version 4.1.8 has been released. The
release notes spell out the changes.
The general NAC Manager/Server enhancements are
- CAS Fallback Behavior Enhancement
- CAS HA Pair Link-Detect Configuration Enhancement
- DHCP Failover Behavior Enhancement
Additionally, there are number of agent fixes.
Posted by: Rob Chee
on Feb 1, 2009
I wrote a previous blog entry that gave information creating a self-signed SSL certificate with Apache. I recently also had to create a self-signed SSL certificate for Microsoft IIS. It turns out that this is really easy.
