AnyConnect using ASA for product evaluation
Hello Security folks,
I am evaluating Cisco Anyconnect VPN solution using ASA. I have few questions needs to be answered asap.
1st-
Can we combine business partners and employee client connections on a single ASA in a secure manner?
2nd-
How the Anyconnect functions for selecting the nearest gateway (optimized gateway selection) to a user works? - I have below link which has a very good explanation but I am looking for the best response.
(https://supportforums.cisco.com/docs/DOC-15326)
3rd-
Can you please highlight the important features which are not supported in other vendors SSL solutions?
Thanks & Regards,
Deepak A.
Karsten,
That helps me. I think I can try to use Cisco IOS router where I can implement Anyconnect at the same time I can have VRF features too. But there are some limitations with the Cisco IOS as below, I will decide the best product satisfying my needs.
Q. Is AnyConnect supported on Cisco IOS® devices?
A. Yes.
As of Cisco IOS Software Release 12.4(15)T in browser-initiated mode only as per the Release 12.4T New Security Features Notes.
As of Cisco IOS Software Release 12.4(20)T, standalone mode is also supported.
For more information, refer to SSL VPN Remote User Guide.
Notes:
Support for DTLS is introduced from Cisco IOS version 15.1(2)T. Refer to the svc dtls command for more information.
Client keepalives are not supported on Cisco IOS devices until the 12.4(20)T release.
Updates to the hardware crypto that can cause disconnects have been resolved with 12.4(T2) for 87x platforms.
Start Before Logon is currently not supported by Cisco IOS.
Q. Is it possible to connect the iPad, iPod, or iPhone AnyConnect VPN Client to a Cisco IOS router?
A. No. It is not possible to connect the iPad, iPod, or iPhone AnyConnect VPN Client to a Cisco IOS router. AnyConnect on iPad/iPhone can connect only to an ASA that runs version 8.0(3).1 or later. Cisco IOS is not supported by the AnyConnect VPN Client for Apple iOS.
Similar Messages
-
Using RoboHelp for Product Branding
My company wants me to be able to use a single source file to
create different versions of HTML help and printed documentation
for product branding. Is there a way to simply put in a variable
like <product name> or <screen name> in the source
file? Some of our products have ten versions which requires me to
insert 10 different screens. My boss would like to use a variable
and have the program call in the correct product names and screens
for the product branding.
Has anyone used RoboHelp for product branding and is there a
better method?In addition to Peter's excellent topics I thought I'd chip
in.
10 screen shots for each screen! Wow that's alot of work and
maintenance. I have suggested an approach which I coined the phrase
"Screen Portrait". This can provide a generic enough image that can
be suitbale for different brandings and localisations:
http://techwritetips.wordpress.com/2006/02/21/best-practice-screen-shots-vs-screen-portrai ts/
http://techwritetips.wordpress.com/2006/03/28/best-practice-screen-portraits/
The rest of the branding should be able to be achieved with
your .css (which can also include control of logo images). -
Does anyone know which companies use VirtualBox for Product QA testing?
Hi guys,
I am doing Software QA testing and currently looking into using virtualization tool.
Does anyone know which companies use VirtualBox for Product QA testing?
I know there are alot of companies using VMWare, but have never heard of any using VirtualBox?
Help me out with the list. Does Oracle ever use their own VirtualBox for testing their own range of products?Well, Oracle uses internally more & more VirtualBox and we see more & more companies using VB instead of VMWare.
Very similar, maybe VB better in memory management
JB -
I was curious if through the ASDM there is a way to show who was logged in last week and for how long? I know through the CLI I can use the sh vpn-sessiondb l2l to see who is currently connected, but trying to get a report of its total use by user, day and hour??
Hi Dan,
The ASA doesn't keep any historical data of connections so it won't be possible.
You can view the users currently connected from the monitoring part of ASDM but you don't have any reporting capabilities.
Regards,
Nicolas -
Goods receipt by using Vl31N for production order.
Hi
we can do Goods receipt by using inbound delivery VL31N, with confirmation control key in PO, for purchase orders.
I want to do Goods receipt using Inbound delivery( VL31N), this is my requirement.
how to do it.Hi
I dont think you will be able to do Goods receipt against prodcution order using inbound delivery VL31N. Inbound deliveries are normally created for Purchase orders and then GR can be posted wrt to the inbound delivery.
Prod order is normally within warehouse only so you can use MB31 and post GR directly against Prod order.
If you can explain more about your scenario hope we may help
Please let us know
thanks -
What happens when Skype for business evaluation expires?
I am testing Skype for business within my company before actually rolling out teh Skype for Business for all. I am using Skype for business evaluation version to test the features and/or and impact it would have on Lync 2013 existing users. I need to know
what happens when the skype for business evaluation patch expires on 1st May 2015, what will the users see? will it switch back to Lync 2013 on its own or do I need to uninstal the package to do so?
Best Regards,
Ketan Tank
+91 9881728161
[email protected]Hi Ketan Tank,
Agree with Anthony, you can get the updates (KB2889923 & KB2889853) through Windows Update.
The Skype for Business Client will already be activated as it is an update to an existing licensed product.
Best regards,
Eric
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected] -
Hi,
I recently move into security devices using ASA for VPN & Firewall . Lots of choices book available from CiscoPress. Any suggestion either books or technical training?
Thanks in advance.
MA.I own the one by David Hucaby:
http://www.ciscopress.com/bookstore/product.asp?isbn=1587054574
Even though it was published five years ago it does a good job of covering the breadth of the product's capabilities.
If you are trying for certification, you may want to supplement your reading with one of the CCNP Security certification guides (VPN and Firewall), Those have both been updated in 2011 and 2012 respectively and thus cover the newer syntax in ASA 8.3+ code.
http://www.ciscopress.com/bookstore/product.asp?isbn=1587204479
http://www.ciscopress.com/bookstore/product.asp?isbn=0132748355 -
Anyconnect using IKEV2 allowing access to Vendor
Hi Everyone,
We have configured Anyconnect using IKEv2 for our internal users and it is working fine.
Recently i got Request from our management to allow our vendor to access our network but they dont need full access to our internal network.
This vendor is also using the anyconnect IKEv2 to access their own internal network.
What i have done is asked our Vendor IT guy to update their xml profile with below info
<ServerList>
<HostEntry>
<HostName>xyz.com</HostName>
<HostAddress>xyz.com</HostAddress>
where xyz.com is our VPN ASA hostname.
Need to know do i need to config new anyconnect profile and group policy to make this work or can i only create new group policy for this vendor?
Regards
MaheshTo configure the vpn filter you would do something like the following:
access-list VPN-FILTER permit ip 192.168.1.0 255.255.255.0 host 10.1.1.10
access-list VPN-FILTER deny ip 192.168.1.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list VPN-FILTER permit ip any any
group-policy VPN internal
group-policy VPN attributes
vpn-filter value VPN-FILTER
Please remember to select a correct answer and rate helpful posts -
IDOC/BAPI for Production order creation from Legacy system
Hi all
We are using an interface to create Production orders from legacy to SAP. Would you recommend an IDOC or a BAPI to create Production orders. If IDOC or BAPI then could you please mention which one?
thanks a bunchHi John,
For your purposes, please use BAPI for production order creation from legacy system. There is no standard inbound IDoc available to use. SAP has an IDoc for outbound interface only (message type LOIPRO).
If there is an inbound IDoc available, I would recommend to use an IDoc.
IDoc technology has excellent error handling and will allow you to reprocess an error (if any).
BAPI is also good approach to use and fast in term of processing.
For BAPI approach, you can use BAPI BAPI_PRODORD_CREATE.
Hope this will help.
Regards,
Ferry Lianto -
I have now used Reflow for 2 client prototypes and here is what I have found.
First, I can see Reflow being an incredible prototyping tool if Adobe steps up and makes it a useful tool for production and not just another creative program to help designers build for the web. That's what Muse is for.
So here is my wish list.
Reflow needs to be able to have more control over the DOM elements. By that I mean, we should be able to have a layer based approach (similar to what you can see in Macaw) to move elements around from "box" to "box" (also, can't we just call them "divs"). Nesting is crucial. Also, what's up with all the IDs in the published files? We should be able to name and create classes for these elements before it publishes. Also, support the basic HTML tags for users to control.
On that note, shared elements should have one style sheet instead of a style sheet for each page.
Also, elements should be able to be saved to a library for use on multiple pages. It is a nightmare now if you create an element on a page that needs to also be placed on other pages. You have to recreate it on each page as of now.
Support for common CSS frameworks would be an amazing idea...just sayin.
As for type...Edge fonts and Typekit are great but we all know that there are many other font libraries out there such as Google fonts. Also, being able to use your own @font-face should be an option.
I think the overall goal would be able to use the files produced as a starting point for production code. As it stands right now, the code that is produced will require more time to format properly than it would be to build from scratch.
I know Reflow is not meant to be a Dreamweaver or Brackets, but it could really help set the stage for development in those programs. It can improve the workflow of web development vs. just being a "cool new app". It has real potential and I hope it gets the love that it deserves.Control over DOM: Yup we're working on exposing this even more. You may or may not have noticed the elements panel already in Reflow. You can find it here:
Are you looking for more than that? We're looking at ways to expose the elements panel in a better way, that should be coming soon.
As for stye sheets all being in one, we're debating this. Since we don't know everything you want to do page-to-page, we're holding off making this leap until we can begin cleaning up what CSS we already give you. (see last answer)
Common library elements: yup, we want this too. It's on our backlog.
Frameworks: yup again, on our backlog. Are there frameworks you would prefer? We don't wanna play favorites unnecessarily. We don't know how it might be prioritized, since we've got lots of features to get to.
Additional fonts: yup for this one too, we have it on our backlog to tackle. As a note, most google fonts are available in the Adobe Web Fonts.
Output: We're actively working on improving the CSS output from Reflow. We cannot promise perfect production quality, but the issues you raise are all ones we're eager to minimize.
Thanks for the thorough feedback, we love these kinds of posts!
- Seth -
BAPI_GOODSMVT_CREATE for production order,not update database
hi guru,
i am using BAPI_GOODSMVT_CREATE for production order.When i m testing this BAPI
at se37 it creates one mat doc no and i m not getting any return messages.Now i m
writing code for it at se38. but it does not update the database even though i used
bapi_transaction_commit. here sy-subrc = 0.bt when i m checking MSEG table showing
that mat doc no does not exists.
please help me out asap.
thanks and regurds,
manasiCHECK THIS CODE
REPORT ZBAPI_GOODSMVT_CREATE.
*DECLARING INTERNAL TABLE TO HOLD FILE DATA.
DATA: BEGIN OF itab OCCURS 0,
text(200),
END OF itab.
*DECLARING INTERNAL TABLE TO PASS FILE DATA.
TYPES: BEGIN OF tw_goodsmvt,
pstng_date TYPE budat,
doc_date TYPE bldat,
material TYPE matnr,
plant TYPE werks_d,
stge_loc TYPE lgort_d,
move_type TYPE bwart,
* entry_qnt TYPE erfmg,
costcenter TYPE kostl,
END OF tw_goodsmvt,
tt_goodsmvt TYPE STANDARD TABLE OF tw_goodsmvt.
DATA: lt_goodsmvt TYPE tt_goodsmvt,
lw_goodsmvt TYPE tw_goodsmvt.
*declaring internal table of bapi structure.
DATA:s_goodsmvt_header LIKE bapi2017_gm_head_01,
lt_goodsmvt_item TYPE STANDARD TABLE OF bapi2017_gm_item_create WITH HEADER LINE,
lt_return TYPE STANDARD TABLE OF bapiret2 WITH HEADER LINE.
DATA:str_filename TYPE string,
gm_code TYPE gm_code,
v_head_count TYPE i VALUE 0,
v_prev_count TYPE i VALUE 1,
v_qnt TYPE string,
v_dummy.
*selection screen
SELECTION-SCREEN BEGIN OF BLOCK bk with frame title text_001.
PARAMETERS:p_docdat TYPE bldat,
p_pstdat TYPE budat,
fname LIKE rlgrap-filename.
SELECTION-SCREEN END OF BLOCK bk.
AT SELECTION-SCREEN ON VALUE-REQUEST FOR fname.
*to provide F4 functionality.
CALL FUNCTION 'F4_FILENAME'
EXPORTING
program_name = syst-cprog
IMPORTING
file_name = fname.
* start of selection
START-OF-SELECTION.
str_filename = fname.
gm_code = '06'.
* to upload data
CALL FUNCTION 'GUI_UPLOAD'
EXPORTING
filename = str_filename
filetype = 'ASC'
has_field_separator = 'X'
read_by_line = 'X'
TABLES
data_tab = itab.
*SPLITING DATA TO INTERNAL TABLES.
LOOP AT itab.
IF itab+0(1) EQ 'H'.
v_head_count = v_head_count + 1.
IF v_head_count GT v_prev_count.
PERFORM bapi_upload.
ENDIF.
SPLIT itab-text AT ',' INTO v_dummy
lw_goodsmvt-pstng_date
lw_goodsmvt-doc_date.
s_goodsmvt_header-doc_date = lw_goodsmvt-doc_date.
s_goodsmvt_header-pstng_date = lw_goodsmvt-pstng_date.
v_prev_count = v_head_count.
ELSEIF itab+0(1) EQ 'L'.
SPLIT itab-text AT ',' INTO v_dummy
lw_goodsmvt-material
lw_goodsmvt-plant
lw_goodsmvt-stge_loc
lw_goodsmvt-move_type
v_qnt
lw_goodsmvt-costcenter.
* PASSING DATA TO INTERNAL TABLE TYPE BAPI STRUCTURE.
lt_goodsmvt_item-material = lw_goodsmvt-material.
lt_goodsmvt_item-plant = lw_goodsmvt-plant.
lt_goodsmvt_item-stge_loc = lw_goodsmvt-stge_loc.
lt_goodsmvt_item-move_type = lw_goodsmvt-move_type.
lt_goodsmvt_item-entry_qnt = v_qnt.
lt_goodsmvt_item-costcenter = lw_goodsmvt-costcenter.
APPEND lt_goodsmvt_item.
ENDIF.
v_prev_count = v_head_count.
ENDLOOP.
PERFORM bapi_upload.
*& Form bapi_upload
form bapi_upload .
CALL FUNCTION 'BAPI_GOODSMVT_CREATE'
EXPORTING
goodsmvt_header = s_goodsmvt_header
goodsmvt_code = gm_code
* TESTRUN = ' '
* IMPORTING
* GOODSMVT_HEADRET =
* MATERIALDOCUMENT =
* MATDOCUMENTYEAR =
tables
goodsmvt_item = lt_goodsmvt_item
* GOODSMVT_SERIALNUMBER =
return = lt_return.
PERFORM commit_work TABLES lt_return.
CLEAR : lw_goodsmvt, s_goodsmvt_header.
REFRESH: lt_goodsmvt[], lt_goodsmvt_item[].
endform. " bapi_upload
*& Form commit_work
* text
* -->P_LT_RETURN text
form commit_work tables p_lt_return structure bapiret2.
IF NOT lt_return[] IS INITIAL.
*error handling
loop at lt_return.
CALL FUNCTION 'FORMAT_MESSAGE'
EXPORTING
ID = lt_return-id
LANG = sy-langu
NO = lt_return-NUMBER
V1 = lt_return-message_v1
V2 = lt_return-message_v2
V3 = lt_return-message_v3
V4 = lt_return-message_v4
IMPORTING
MSG = lt_return-MESSAGE
EXCEPTIONS
NOT_FOUND = 1
OTHERS = 2.
WRITE: lt_return-id, lt_return-message, lt_return-message_v1, lt_return-message_v2,
lt_return-message_v3, lt_return-message_v4.
CLEAR lt_return.
ENDLOOP.
ELSE.
* commit work
CALL FUNCTION 'BAPI_TRANSACTION_COMMIT'
* EXPORTING
* WAIT =
IMPORTING
RETURN = lt_return.
WRITE: lt_return-id, lt_return-message, lt_return-message_v1, lt_return-message_v2,
lt_return-message_v3, lt_return-message_v4.
CLEAR lt_return.
endif.
endform. " commit_work -
Bapi For Production Confirmation ?
Hi,
I am using "BAPI_PRODORDCONF_CREATE_TT" for production confirmation.
I need to also pass the corresponding goods movement for the order operation. How to achieve this. and also what are the mandatory fields to be supplied for good movement.
Regards,
Navneeth K.Hi Bothra,
Follow the sample code.
DATA : BEGIN OF TIMETICKETS OCCURS 0.
INCLUDE STRUCTURE BAPI_PP_TIMETICKET.
DATA : END OF TIMETICKETS.
DATA : BEGIN OF GOODSMOVEMENTS OCCURS 0.
INCLUDE STRUCTURE BAPI2017_GM_ITEM_CREATE.
DATA :END OF GOODSMOVEMENTS.
*DATA : LINK_CONF_GOODSMOV TYPE BAPI_LINK_CONF_GOODSMOV.
DATA : DETAIL_RETURN TYPE BAPI_CORU_RETURN OCCURS 0 WITH HEADER LINE.
DATA : RETURN TYPE BAPIRET1 OCCURS 0 WITH HEADER LINE.
DATA : POST_WRONG_ENTRIES LIKE BAPI_CORU_PARAM-INS_ERR.
DATA : TESTRUN LIKE BAPI_CORU_PARAM-TESTRUN.
DATA: BEGIN OF LINK OCCURS 0.
INCLUDE STRUCTURE BAPI_LINK_CONF_GOODSMOV.
DATA: END OF LINK.
DATA: BEGIN OF PROPOSE OCCURS 0.
INCLUDE STRUCTURE BAPI_PP_CONF_PROP.
DATA: END OF PROPOSE.
DATA : BEGIN OF LINK_CONF_GOODSMOV OCCURS 0.
INCLUDE STRUCTURE BAPI_LINK_CONF_GOODSMOV.
DATA : END OF LINK_CONF_GOODSMOV.
LOOP AT TIMETKT.
MOVE-CORRESPONDING TIMETKT TO TIMETICKETS.
APPEND TIMETICKETS.
LOOP AT BAPI_ITAB1 WHERE SRL = TIMETKT-SRL.
MOVE-CORRESPONDING BAPI_ITAB1 TO GOODSMOVEMENTS.
CONF_QUAN_UNIT.
CONF_ACTI_UNIT1.
APPEND GOODSMOVEMENTS.
ENDLOOP.
PROPOSE-QUANTITY = 'X'.
PROPOSE-ACTIVITY = 'X'.
PROPOSE-DATE_AND_TIME = 'X'.
PROPOSE-GOODSMOVEMENT = 'X'.
APPEND PROPOSE.
CALL FUNCTION 'BAPI_PRODORDCONF_GET_TT_PROP'
EXPORTING
PROPOSE = PROPOSE
IMPORTING
RETURN =
TABLES
TIMETICKETS = TIMETICKETS
GOODSMOVEMENTS = GOODSMOVEMENTS
LINK_CONF_GOODSMOV = LINK_CONF_GOODSMOV
DETAIL_RETURN = DETAIL_RETURN.
CALL FUNCTION 'BAPI_PRODORDCONF_CREATE_TT'
EXPORTING
POST_WRONG_ENTRIES = '0'
TESTRUN =
IMPORTING
RETURN = RETURN
TABLES
TIMETICKETS = TIMETICKETS
GOODSMOVEMENTS = GOODSMOVEMENTS
LINK_CONF_GOODSMOV = LINK_conf_goodsmov
DETAIL_RETURN = DETAIL_RETURN.
if return-id is initial.
commit work.
endif.
I think it will be helpfull to u.
Regards
Srimanta -
Can w use rsync for Business Continuity for Oracle Applications Release12 ?
Hi ,
One of our customer has implemented Oracle EBS R12 (12.0.6) on HP-UX (IA).
Database Tier on a Two Node Oracle Database 10g R2 RAC
Application Tier on Two Node using Shared APPL_TOP with Load Balancer.
They want to implement DR site using Oracle Data Guard (RAC to Non-RAC).
I was referring to Note: 452056.1 +( Business Continuity for Oracle Applications Release 12 on Database Release 10gR2 - Single Instance and RAC )+.
In this note its mentioned that:
If you wish to synchronize your concurrent manager log and out files between production and standby, you need to create folders matching to the APPLCSF environment variables for each others......................... For example, set up an rsync job similar to the below example in cron, to run every few minutes.
Can we use rsync for Production systems without any issues? Customer is concerned about using freeware on their Production systems.
Rgds,
Thiru.Thiru,
Can we use rsync for Production systems without any issues? Customer is concerned about using freeware on their Production systems.You can use it with no issues. Or, you could use any other copy tool to copy those files.
Thanks,
Hussein -
About ODMr for product design and development.
how ODMr can be used to find patterns of desingers' behaviors when they create new design for a product?
In general, designers tend to change their design to satisfy needs required by customers or technicians.
Is ODMr able to find which design parameters are most contributive to the performance of a product?
Is it ok to use Decision Tree if I have hypothesis space for desing parameters and training data?
I want to use ODMr to improve R&D process.
But I'm sure it is a smart way to use ODMr for product design and development.
If anyone has good idea or other algorithm available for that field, please let me know~~
Have fun~!I would think if you are going to run both of those programs at the same time, or even one at a time, a system with discrete graphic would be a better fit for you.
The next question is if you are doing web design do you really need a retina display. At this time only apple has them so everyother computer viewing your web designs wouldn't see the difference, if there is any to begin with. -
Hi Friends,
Need your help to figure out solution for an issue :
I need ability to substitute alternate component when we do ATP during release of a production order.
As far as I know, we can do this in 2 ways
1) Maintain alternate BOM with the substitute material
2) Use GATP production substitution procedures
Can you think of any other ways of doing this. I do not want to use GATP (within APO) and want to get this done in ECC itself.
Please suggest!!!Thanks for the reply Suri.
I dont think I can use this as there will be multiple alternates for a product.
Did anybody use GATP for production orders, not CTP or MLATP but vanilla ATP and RBA. Please let me know what precautions should be taken and are there any considerations for using the functionality. I have used GATP for sales orders earlier but never for production orders, I assume functionality should be same except for the business even which would be PP.
Thanks and waiting for replies.
Prod_Planner
Maybe you are looking for
-
Hi All, One of the server got rebooted in our environment because of the bugcheck below is the error in event logs bugcheck was: 0x0000001a (0x0000000000003452, 0x000000007efd0000, 0xfffff70001080590, 0x0000000000000000Below is the bug check analysis
-
When I print out the InDesign file, there is always white edges on the paper, how can I remove them?
-
How to set charecterset while installation
Hi To All, I had install oracle 10R2 64 bit on windows 2003 release2 64 for upgradation and over existing language is arabic for that for upgradation also i have to set language at OS level and while installing i have install only oracle so i want to
-
How can i print calender in colours instead of black and white
I use various colours for my calenders put when I print them out they all appear as black and white. Can any one help me or can it be done. Thanks
-
A ? about buying a macbook pro in italy
I am an American currently living in italy. I want to order a macbook pro from the italin apple site. if i purchase a macbook with the US/english keyboard will all the OS software be in english? this is important cause i dont speak or read italian. M