AnyConnect using ASA for product evaluation

Hello Security folks,
I am evaluating Cisco Anyconnect VPN solution using ASA. I have few questions needs to be answered asap.
1st-
Can we combine business partners and employee client connections on a single ASA in a secure manner?
2nd-
How the Anyconnect functions for selecting the nearest gateway (optimized gateway selection) to a user works? - I have below link which has a very good explanation but I am looking for the best response.
(https://supportforums.cisco.com/docs/DOC-15326)
3rd-
Can you please highlight the important features which are not supported in other vendors SSL solutions?
Thanks & Regards,
Deepak A.

Karsten,
That helps me. I think I can try to use Cisco IOS router where I can implement Anyconnect at the same time I can have VRF features too. But there are some limitations with the Cisco IOS as below, I will decide the best product satisfying my needs.
Q. Is AnyConnect supported on Cisco IOS® devices?
    A. Yes.
    As of Cisco IOS Software Release 12.4(15)T in browser-initiated mode only as per the Release 12.4T New Security Features Notes.
    As of Cisco IOS Software Release 12.4(20)T, standalone mode is also supported.
    For more information, refer to SSL VPN Remote User Guide.
    Notes:
        Support for DTLS is introduced from Cisco IOS version 15.1(2)T. Refer to the svc dtls command for more information.
        Client keepalives are not supported on Cisco IOS devices until the 12.4(20)T release.
        Updates to the hardware crypto that can cause disconnects have been resolved with 12.4(T2) for 87x platforms.
       Start Before Logon is currently not supported by Cisco IOS.
Q. Is it possible to connect the iPad, iPod, or iPhone AnyConnect VPN Client to a Cisco IOS router?
    A. No. It is not possible to connect the iPad, iPod, or iPhone AnyConnect VPN Client to a Cisco IOS router. AnyConnect on iPad/iPhone can connect only to an ASA that runs version 8.0(3).1 or later. Cisco IOS is not supported by the AnyConnect VPN Client for Apple iOS.

Similar Messages

  • Using RoboHelp for Product Branding

    My company wants me to be able to use a single source file to
    create different versions of HTML help and printed documentation
    for product branding. Is there a way to simply put in a variable
    like <product name> or <screen name> in the source
    file? Some of our products have ten versions which requires me to
    insert 10 different screens. My boss would like to use a variable
    and have the program call in the correct product names and screens
    for the product branding.
    Has anyone used RoboHelp for product branding and is there a
    better method?

    In addition to Peter's excellent topics I thought I'd chip
    in.
    10 screen shots for each screen! Wow that's alot of work and
    maintenance. I have suggested an approach which I coined the phrase
    "Screen Portrait". This can provide a generic enough image that can
    be suitbale for different brandings and localisations:
    http://techwritetips.wordpress.com/2006/02/21/best-practice-screen-shots-vs-screen-portrai ts/
    http://techwritetips.wordpress.com/2006/03/28/best-practice-screen-portraits/
    The rest of the branding should be able to be achieved with
    your .css (which can also include control of logo images).

  • Does anyone know which companies use VirtualBox for Product QA testing?

    Hi guys,
    I am doing Software QA testing and currently looking into using virtualization tool.
    Does anyone know which companies use VirtualBox for Product QA testing?
    I know there are alot of companies using VMWare, but have never heard of any using VirtualBox?
    Help me out with the list. Does Oracle ever use their own VirtualBox for testing their own range of products?

    Well, Oracle uses internally more & more VirtualBox and we see more & more companies using VB instead of VMWare.
    Very similar, maybe VB better in memory management
    JB

  • Using ASA for our VPN

    I was curious if through the ASDM there is a way to show who was logged in last week and for how long?  I know through the CLI I can use the sh vpn-sessiondb l2l to see who is currently connected, but trying to get a report of its total use by user, day and hour??

    Hi Dan,
    The ASA doesn't keep any historical data of connections so it won't be possible.
    You can view the users currently connected from the monitoring part of ASDM but you don't have any reporting capabilities.
    Regards,
    Nicolas

  • Goods receipt by using Vl31N for production order.

    Hi
    we can do Goods receipt by using inbound delivery VL31N, with confirmation control key in PO, for purchase orders.
    I want to do Goods receipt using Inbound delivery( VL31N), this is my requirement.
    how to do it.

    Hi
    I dont think you will be able to do Goods receipt against prodcution order using inbound delivery VL31N. Inbound deliveries are normally created for Purchase orders and then GR can be posted wrt to the inbound delivery.
    Prod order is normally within warehouse only so you can use MB31 and post GR directly against Prod order.
    If you can explain more about your scenario hope we may help
    Please let us know
    thanks

  • What happens when Skype for business evaluation expires?

    I am testing Skype for business within my company before actually rolling out teh Skype for Business for all. I am using Skype for business evaluation version to test the features and/or and impact it would have on Lync 2013 existing users. I need to know
    what happens when the skype for business evaluation patch expires on 1st May 2015, what will the users see? will it switch back to Lync 2013 on its own or do I need to uninstal the package to do so?
    Best Regards,
    Ketan Tank 
    +91 9881728161
    [email protected]

    Hi Ketan Tank,
    Agree with Anthony, you can get the updates (KB2889923 & KB2889853) through Windows Update.
    The Skype for Business Client will already be activated as it is an update to an existing licensed product.
    Best regards,
    Eric
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • ASA for beginner

    Hi,
    I recently move into security devices using ASA for VPN & Firewall . Lots of choices book available from CiscoPress. Any suggestion either books or technical training?
    Thanks in advance.       
    MA.          

    I own the one by David Hucaby:
    http://www.ciscopress.com/bookstore/product.asp?isbn=1587054574
    Even though it was published five years ago it does a good job of covering the breadth of the product's capabilities.
    If you are trying for certification, you may want to supplement your reading with one of the CCNP Security certification guides (VPN and Firewall), Those have both been updated in 2011 and 2012 respectively and thus cover the newer syntax in ASA 8.3+ code.
    http://www.ciscopress.com/bookstore/product.asp?isbn=1587204479
    http://www.ciscopress.com/bookstore/product.asp?isbn=0132748355

  • Anyconnect using IKEV2 allowing access to Vendor

    Hi Everyone,
    We have configured Anyconnect using IKEv2 for our internal users and it is working fine.
    Recently i got  Request from our management to allow our  vendor to access our network but they dont need full access to our internal network.
    This vendor is also using the anyconnect  IKEv2  to access their own internal network.
    What i have done is asked our Vendor IT guy to update their xml profile with below info
    <ServerList>
      <HostEntry>
       <HostName>xyz.com</HostName>
       <HostAddress>xyz.com</HostAddress>
    where xyz.com is our VPN ASA hostname.
    Need to know do i need to config new anyconnect profile and group policy to make this work or can i only create new group policy for this vendor?
    Regards
    Mahesh

    To configure the vpn filter you would do something like the following:
    access-list VPN-FILTER permit ip 192.168.1.0 255.255.255.0 host 10.1.1.10
    access-list VPN-FILTER deny ip 192.168.1.0 255.255.255.0 10.1.1.0 255.255.255.0
    access-list VPN-FILTER permit ip any any
    group-policy VPN internal
    group-policy VPN attributes  
      vpn-filter value VPN-FILTER
    Please remember to select a correct answer and rate helpful posts

  • IDOC/BAPI for Production order creation from Legacy system

    Hi all
    We are using an interface to create Production orders from legacy to SAP. Would you recommend an IDOC or a BAPI to create Production orders. If IDOC or BAPI then could you please mention which one?
    thanks a bunch

    Hi John,
    For your purposes, please use BAPI for production order creation from legacy system. There is no standard inbound IDoc available to use. SAP has an IDoc for outbound interface only (message type LOIPRO).
    If there is an inbound IDoc available, I would recommend to use an IDoc.
    IDoc technology has excellent error handling and will allow you to reprocess an error (if any).
    BAPI is also good approach to use and fast in term of  processing.
    For BAPI approach, you can use BAPI BAPI_PRODORD_CREATE.
    Hope this will help.
    Regards,
    Ferry Lianto

  • I have now used Reflow for 2 client prototypes and here is what I have found.

    First, I can see Reflow being an incredible prototyping tool if Adobe steps up and makes it a useful tool for production and not just another creative program to help designers build for the web. That's what Muse is for.
    So here is my wish list.
    Reflow needs to be able to have more control over the DOM elements. By that I mean, we should be able to have a layer based approach (similar to what you can see in Macaw) to move elements around from "box" to "box" (also, can't we just call them "divs"). Nesting is crucial. Also, what's up with all the IDs in the published files? We should be able to name and create classes for these elements before it publishes. Also, support the basic HTML tags for users to control.
    On that note, shared elements should have one style sheet instead of a style sheet for each page.
    Also, elements should be able to be saved to a library for use on multiple pages. It is a nightmare now if you create an element on a page that needs to also be placed on other pages. You have to recreate it on each page as of now.
    Support for common CSS frameworks would be an amazing idea...just sayin.
    As for type...Edge fonts and Typekit are great but we all know that there are many other font libraries out there such as Google fonts. Also, being able to use your own @font-face should be an option.
    I think the overall goal would be able to use the files produced as a starting point for production code. As it stands right now, the code that is produced will require more time to format properly than it would be to build from scratch.
    I know Reflow is not meant to be a Dreamweaver or Brackets, but it could really help set the stage for development in those programs. It can improve the workflow of web development vs. just being a "cool new app". It has real potential and I hope it gets the love that it deserves.

    Control over DOM: Yup we're working on exposing this even more. You may or may not have noticed the elements panel already in Reflow. You can find it here:
    Are you looking for more than that? We're looking at ways to expose the elements panel in a better way, that should be coming soon.
    As for stye sheets all being in one, we're debating this. Since we don't know everything you want to do page-to-page, we're holding off making this leap until we can begin cleaning up what CSS we already give you. (see last answer)
    Common library elements: yup, we want  this too. It's on our backlog.
    Frameworks: yup again, on our backlog. Are there frameworks you would prefer? We don't wanna play favorites unnecessarily. We don't know how it might be prioritized, since we've got lots of features to get to.
    Additional fonts: yup for this one too, we have it on our backlog to tackle. As a note, most google fonts are available in the Adobe Web Fonts.
    Output: We're actively working on improving the CSS output from Reflow. We cannot promise perfect production quality, but the issues you raise are all ones we're eager to minimize.
    Thanks for the thorough feedback, we love these kinds of posts!
    - Seth

  • BAPI_GOODSMVT_CREATE for production order,not update database

    hi guru,
    i am using BAPI_GOODSMVT_CREATE for production order.When i m testing this BAPI
    at se37 it creates one mat doc no and i m not getting any return messages.Now i m
    writing code for it at se38. but it does not update the database even though i used
    bapi_transaction_commit. here sy-subrc = 0.bt when i m checking MSEG table showing
    that mat doc no does not exists.
    please help me out  asap.
    thanks and regurds,
    manasi

    CHECK THIS CODE
    REPORT ZBAPI_GOODSMVT_CREATE.
    *DECLARING INTERNAL TABLE TO HOLD FILE DATA.
    DATA: BEGIN OF itab OCCURS 0,
              text(200),
          END OF itab.
    *DECLARING INTERNAL TABLE TO PASS FILE DATA.
    TYPES: BEGIN OF tw_goodsmvt,
                pstng_date TYPE budat,
                doc_date TYPE bldat,
                material TYPE matnr,
                plant TYPE werks_d,
                stge_loc TYPE lgort_d,
                move_type TYPE bwart,
    *            entry_qnt TYPE erfmg,
                costcenter TYPE kostl,
            END OF tw_goodsmvt,
            tt_goodsmvt TYPE STANDARD TABLE OF tw_goodsmvt.
    DATA: lt_goodsmvt TYPE tt_goodsmvt,
          lw_goodsmvt TYPE tw_goodsmvt.
    *declaring internal table of bapi structure.
    DATA:s_goodsmvt_header LIKE  bapi2017_gm_head_01,
         lt_goodsmvt_item TYPE STANDARD TABLE OF bapi2017_gm_item_create WITH HEADER LINE,
         lt_return TYPE STANDARD TABLE OF bapiret2 WITH HEADER LINE.
    DATA:str_filename TYPE string,
         gm_code TYPE gm_code,
          v_head_count TYPE i VALUE 0,
          v_prev_count TYPE i VALUE 1,
          v_qnt TYPE string,
          v_dummy.
    *selection screen
    SELECTION-SCREEN BEGIN OF BLOCK bk with frame title text_001.
    PARAMETERS:p_docdat TYPE bldat,
               p_pstdat TYPE budat,
               fname LIKE rlgrap-filename.
    SELECTION-SCREEN END OF BLOCK bk.
    AT SELECTION-SCREEN ON VALUE-REQUEST FOR fname.
    *to provide F4 functionality.
      CALL FUNCTION 'F4_FILENAME'
        EXPORTING
          program_name = syst-cprog
        IMPORTING
          file_name    = fname.
    * start of selection
    START-OF-SELECTION.
      str_filename = fname.
      gm_code = '06'.
    * to upload data
      CALL FUNCTION 'GUI_UPLOAD'
        EXPORTING
          filename            = str_filename
          filetype            = 'ASC'
          has_field_separator = 'X'
          read_by_line        = 'X'
        TABLES
          data_tab            = itab.
    *SPLITING DATA TO INTERNAL TABLES.
      LOOP AT itab.
        IF itab+0(1) EQ 'H'.
          v_head_count =  v_head_count + 1.
          IF v_head_count GT v_prev_count.
            PERFORM bapi_upload.
          ENDIF.
          SPLIT itab-text AT ',' INTO v_dummy
                                      lw_goodsmvt-pstng_date
                                      lw_goodsmvt-doc_date.
          s_goodsmvt_header-doc_date   = lw_goodsmvt-doc_date.
          s_goodsmvt_header-pstng_date = lw_goodsmvt-pstng_date.
          v_prev_count = v_head_count.
      ELSEIF itab+0(1) EQ 'L'.
        SPLIT itab-text AT ',' INTO v_dummy
                                    lw_goodsmvt-material
                                    lw_goodsmvt-plant
                                    lw_goodsmvt-stge_loc
                                    lw_goodsmvt-move_type
                                    v_qnt
                                    lw_goodsmvt-costcenter.
    * PASSING DATA TO INTERNAL TABLE TYPE BAPI STRUCTURE.
        lt_goodsmvt_item-material = lw_goodsmvt-material.
        lt_goodsmvt_item-plant    = lw_goodsmvt-plant.
        lt_goodsmvt_item-stge_loc = lw_goodsmvt-stge_loc.
        lt_goodsmvt_item-move_type = lw_goodsmvt-move_type.
        lt_goodsmvt_item-entry_qnt = v_qnt.
        lt_goodsmvt_item-costcenter = lw_goodsmvt-costcenter.
        APPEND lt_goodsmvt_item.
      ENDIF.
      v_prev_count = v_head_count.
      ENDLOOP.
      PERFORM bapi_upload.
    *&      Form  bapi_upload
    form bapi_upload .
    CALL FUNCTION 'BAPI_GOODSMVT_CREATE'
      EXPORTING
        goodsmvt_header             = s_goodsmvt_header
        goodsmvt_code               = gm_code
    *   TESTRUN                     = ' '
    * IMPORTING
    *   GOODSMVT_HEADRET            =
    *   MATERIALDOCUMENT            =
    *   MATDOCUMENTYEAR             =
      tables
        goodsmvt_item               = lt_goodsmvt_item
    *   GOODSMVT_SERIALNUMBER       =
        return                      = lt_return.
            PERFORM commit_work TABLES lt_return.
            CLEAR : lw_goodsmvt, s_goodsmvt_header.
            REFRESH: lt_goodsmvt[], lt_goodsmvt_item[].
    endform.                    " bapi_upload
    *&      Form  commit_work
    *       text
    *      -->P_LT_RETURN  text
    form commit_work  tables   p_lt_return structure bapiret2.
      IF NOT lt_return[] IS INITIAL.
    *error handling
    loop at lt_return.
    CALL FUNCTION 'FORMAT_MESSAGE'
    EXPORTING
       ID              = lt_return-id
       LANG            = sy-langu
       NO              = lt_return-NUMBER
       V1              = lt_return-message_v1
       V2              = lt_return-message_v2
       V3              = lt_return-message_v3
       V4              = lt_return-message_v4
    IMPORTING
       MSG             = lt_return-MESSAGE
    EXCEPTIONS
       NOT_FOUND       = 1
       OTHERS          = 2.
    WRITE: lt_return-id, lt_return-message, lt_return-message_v1, lt_return-message_v2,
                 lt_return-message_v3, lt_return-message_v4.
          CLEAR lt_return.
        ENDLOOP.
      ELSE.
    * commit work
      CALL FUNCTION 'BAPI_TRANSACTION_COMMIT'
    *   EXPORTING
    *     WAIT          =
       IMPORTING
         RETURN        = lt_return.
    WRITE: lt_return-id, lt_return-message, lt_return-message_v1, lt_return-message_v2,
                 lt_return-message_v3, lt_return-message_v4.
          CLEAR lt_return.
    endif.
    endform.                    " commit_work

  • Bapi For Production Confirmation ?

    Hi,
    I am using "BAPI_PRODORDCONF_CREATE_TT" for production confirmation.
    I need to also pass the corresponding goods movement for the order operation. How to achieve this. and also what are the mandatory fields to be supplied for good movement.
    Regards,
    Navneeth K.

    Hi Bothra,
    Follow the sample code.
    DATA : BEGIN OF TIMETICKETS OCCURS 0.
            INCLUDE STRUCTURE BAPI_PP_TIMETICKET.
    DATA : END OF TIMETICKETS.
    DATA : BEGIN OF GOODSMOVEMENTS OCCURS 0.
         INCLUDE STRUCTURE BAPI2017_GM_ITEM_CREATE.
    DATA :END OF GOODSMOVEMENTS.
    *DATA : LINK_CONF_GOODSMOV TYPE     BAPI_LINK_CONF_GOODSMOV.
    DATA : DETAIL_RETURN     TYPE     BAPI_CORU_RETURN OCCURS 0 WITH HEADER LINE.
    DATA : RETURN     TYPE     BAPIRET1 OCCURS 0 WITH HEADER LINE.
    DATA : POST_WRONG_ENTRIES LIKE     BAPI_CORU_PARAM-INS_ERR.
    DATA : TESTRUN     LIKE     BAPI_CORU_PARAM-TESTRUN.
    DATA: BEGIN OF LINK OCCURS 0.
    INCLUDE STRUCTURE BAPI_LINK_CONF_GOODSMOV.
    DATA: END OF LINK.
    DATA: BEGIN OF PROPOSE OCCURS 0.
    INCLUDE STRUCTURE BAPI_PP_CONF_PROP.
    DATA: END OF PROPOSE.
    DATA : BEGIN OF LINK_CONF_GOODSMOV OCCURS 0.
    INCLUDE STRUCTURE BAPI_LINK_CONF_GOODSMOV.
    DATA : END OF LINK_CONF_GOODSMOV.
    LOOP AT TIMETKT.
    MOVE-CORRESPONDING TIMETKT TO TIMETICKETS.
    APPEND TIMETICKETS.
    LOOP AT BAPI_ITAB1 WHERE SRL = TIMETKT-SRL.
        MOVE-CORRESPONDING BAPI_ITAB1 TO GOODSMOVEMENTS.
    CONF_QUAN_UNIT.
    CONF_ACTI_UNIT1.
        APPEND GOODSMOVEMENTS.
    ENDLOOP.
    PROPOSE-QUANTITY = 'X'.
    PROPOSE-ACTIVITY = 'X'.
    PROPOSE-DATE_AND_TIME = 'X'.
    PROPOSE-GOODSMOVEMENT = 'X'.
    APPEND PROPOSE.
        CALL FUNCTION 'BAPI_PRODORDCONF_GET_TT_PROP'
         EXPORTING
           PROPOSE                  = PROPOSE
        IMPORTING
          RETURN                   =
          TABLES
            TIMETICKETS              = TIMETICKETS
           GOODSMOVEMENTS           = GOODSMOVEMENTS
           LINK_CONF_GOODSMOV       = LINK_CONF_GOODSMOV
           DETAIL_RETURN            = DETAIL_RETURN.
        CALL FUNCTION 'BAPI_PRODORDCONF_CREATE_TT'
         EXPORTING
           POST_WRONG_ENTRIES       = '0'
          TESTRUN                  =
         IMPORTING
           RETURN                   = RETURN
          TABLES
            TIMETICKETS              = TIMETICKETS
           GOODSMOVEMENTS           = GOODSMOVEMENTS
       LINK_CONF_GOODSMOV       = LINK_conf_goodsmov
        DETAIL_RETURN            = DETAIL_RETURN.
        if return-id is initial.
        commit work.
        endif.
    I think it will be helpfull to u.
    Regards
    Srimanta

  • Can w use rsync for Business Continuity for Oracle Applications Release12 ?

    Hi ,
    One of our customer has implemented Oracle EBS R12 (12.0.6) on HP-UX (IA).
    Database Tier on a Two Node Oracle Database 10g R2 RAC
    Application Tier on Two Node using Shared APPL_TOP with Load Balancer.
    They want to implement DR site using Oracle Data Guard (RAC to Non-RAC).
    I was referring to Note: 452056.1 +( Business Continuity for Oracle Applications Release 12 on Database Release 10gR2 - Single Instance and RAC )+.
    In this note its mentioned that:
    If you wish to synchronize your concurrent manager log and out files between production and standby, you need to create folders matching to the APPLCSF environment variables for each others......................... For example, set up an rsync job similar to the below example in cron, to run every few minutes.
    Can we use rsync for Production systems without any issues? Customer is concerned about using freeware on their Production systems.
    Rgds,
    Thiru.

    Thiru,
    Can we use rsync for Production systems without any issues? Customer is concerned about using freeware on their Production systems.You can use it with no issues. Or, you could use any other copy tool to copy those files.
    Thanks,
    Hussein

  • About ODMr for product design and development.

    how ODMr can be used to find patterns of desingers' behaviors when they create new design for a product?
    In general, designers tend to change their design to satisfy needs required by customers or technicians.
    Is ODMr able to find which design parameters are most contributive to the performance of a product?
    Is it ok to use Decision Tree if I have hypothesis space for desing parameters and training data?
    I want to use ODMr to improve R&D process.
    But I'm sure it is a smart way to use ODMr for product design and development.
    If anyone has good idea or other algorithm available for that field, please let me know~~
    Have fun~!

    I would think if you are going to run both of those programs at the same time, or even one at a time, a system with discrete graphic would be a better fit for you.
    The next question is if you are doing web design do you really need a retina display. At this time only apple has them so everyother computer viewing your web designs wouldn't see the difference, if there is any to begin with.

  • ATP for production order

    Hi Friends,
    Need your help to figure out solution for an issue :
    I need ability to substitute alternate component when we do ATP during release of a production order.
    As far as I know, we can do this in 2 ways
    1) Maintain alternate BOM with the substitute material
    2) Use GATP production substitution procedures
    Can you think of any other ways of doing this. I do not want to use GATP (within APO) and want to get this done in ECC itself.
    Please suggest!!!

    Thanks for the reply Suri.
    I dont think I can use this as there will be multiple alternates for a product.
    Did anybody use GATP for production orders, not CTP or MLATP but vanilla ATP and RBA. Please let me know what precautions should be taken and are there any considerations for using the functionality. I have used GATP for sales orders earlier but never for production orders, I assume functionality should be same except for the business even which would be PP.
    Thanks and waiting for replies.
    Prod_Planner

Maybe you are looking for