In a previous post I outlined how to capture specific port traffic, in this case HTTPS, on the Cisco ASA. This post is dedicated to parsing the data from the ASCII capture and running the Heartbleed check on it.
Read More Automating Heartbleed Bug Check From Cisco ASA Capture DataOn a Cisco ASA you can configure capturing of data to allow for deeper troubleshooting of issues. With the recent issue of the Heartbleed bug, I needed a way to capture HTTPS traffic and inspect remote hosts for the vulnerability. If the site was vulnerable, I would create a temporary block until that site patched.
Read More Configure Cisco ASA to Capture Specific Port TrafficHad an issue with a user that was failing to log into the VPN from remote. Couldn’t initially figure it out while at home while troubleshooting the authentication. So here’s how to test authentication from the Cisco ASA CLI.
Read More Test Cisco ASA VPN AuthenticationJust a quick note to myself on debugging VPN connectivity; you can specify a peer, user, etc. as a condition to the crypto debug. Here’s how I did it from the CLI: ciscoasa# debug crypto condition peer 1.2.3.4 ciscoasa# debug crypto isakmp 255 ciscoasa# debug crypto ipsec 255 ciscoasa# term mon This will allow you…
Read More Cisco ASA Debug a Specific VPN TunnelCame across a decent host template for Cisco ASA devices that works well with Cacti. Grab the CISCO-FIREWALL-MIB if you don’t already have them. Get either Version 1 or Version 2 directly from Cisco and also get CISCO-SMI Version 1 or Version 2: Browse Cisco MIBs: http://tools.cisco.com/Support/SNMP/do/BrowseMIB.do?local=en&step=2&mibName=CISCO-FIREWALL-MIB Cisco CISCO-FIREWALL-MIB Version 1 Cisco CISCO-FIREWALL-MIB Version 2…
Read More Cacti Cisco ASA Host TemplateFrom time to time I need to track down a user that is having trouble either connecting to a hosted solution at their datacenter or some other remote connectivity need and they are using a Cisco ASA to handle the VPN connectivity. In troubleshooting, I like to find out licensing restrictions on the ASA as…
Read More List Connected VPN Users on Cisco ASA