WSDL authentication disable

Hi All, Can you please guide and disable WSDL authentication in PO 7.4. Where to change com.sap.aii.ibdir.wsdl.servlet.authentication with  off in PO 7.4 java stack. Regards, Venkata

Karthik
Try using this instead
NWA > Configuration > Infrastructure > Java System Properties > Services

Similar Messages

  • WSDL Authentication - Details Button Disabled

    Hi,
    We are using CE 7.3 EHP1 system, I created a WSDL in BPM to start the process and deployed in CE system. This WSDL is called by an external Java Application(WebCommerce) running in different portal.
    They can import the WSDL & pass the data to it, But BPM could not start the process & fails stating (Authentication Error) which i could find in the Logs.
    But when I try to give the authentication to the webservices by navigating SOA -> Application & Scenario Communication --> Single Service Administration
    Identify my service --> Configuration --> Security --> HTTP Authentication --> Click Userid/Passwd . The Details button not enabled to give the userid and password.
    Can you please let me know how to enable the details button.
    Your Help is Much Appreciated.
    Thanks,,
    Prabhu Karuppasamy

    Hi Prabhu,
    If there is no authentication for the execution of WSDL, it could be related to the special user 'SAP_BPM_Service' .
    I had faced this similar issue while triggering the BPM from a WDJ Application.
    I referred this document and assigned the UME Action:  "SAP_BPM_TRIGGER_EVENT" to SAP_BPM_Service.
    My understanding is that if there is no authentication for execution of the WSDL from another application, that implies to BPM that there is no specific user for this execution.
    So, SAP_BPM_Service executes this.
    I could be wrong and there might be some other issue here. But when my BPM did not start from another application, i tried this and it worked for me.
    You could try it too. Any help is good help at this time.
    Note: Make sure all the configurations and application communications and provider system configs are done as suggested earlier. If nothing works, then try this. It worked for me.
    Hope it works for you too.
    Cheers,
    Sid.

  • WSDL -authentication issue

    Hi All,
    I have a requirement of Proxy to Soap.
    Client have given the below webservice.
          <Id>int</Id>
    <Password>string</Password>
          <RequestXML>string</RequestXML>
        </Request>
      </soap:Body>
    </soap:Envelope>
    Here i want to give the authentication information in "id" and "password" and my outbound message in "Request XML" .
    So please suggest me , shall i skip the "id" and "password" and go for SOAP CC "authentication option"
    and sending only outbound message to this wsdl.
    Orshall i proceed with  XSLT mapping for headers
    Thanks in advance .
    Regards,
    Karthikeyan.
    Edited by: Karthikeyan S.K. on Jul 13, 2010 2:14 PM

    I think you can use Axis for SOAP Adapter to add userid and password in the soap header.
    For me also same requirement and m planning to use this.
    Please go through the below link, which might help you.
    SOAP Request with Web Service Security
    Thanks,
    Hetal

  • WCF - Custom WSDL (Authentication)

    I`m looking for a way to generate a WSDL based on the permissions the user has.
    We using DigistAuthentication for authorization.
    What we have so far..
    When the user logon with his credentials I can produce the WSDL for this user because I have the UserIdentity and I can use IWsdlExportExtension with ExportContract to create the WSDL for this user.
    Whats the problem..
    After a user did logon to the webservice, the service description is created for the first user which logged on. I would like to be able to generate the WSDL (ServiceDescription) for each user.

    Since the authentication is not occurring where the service is hosted, the solution will be to hand-craft a WSDL file, and then tell WCF to reference it using
    externalmetadatalocation.

  • SMTP authentication disabled in Outlook

    Hello,
    Was a security or outlook update recently released that disabled SMTP authentication in Outlook 2003/2007?  I've had several users report that this has been disabled; all are using various flavors of Outlook and Windows.

    Hi,
    “SMTP requires authentication” option is set when using a POP3, IMAP or HTTP account in Outlook. If you are using Outlook 2007, we need to follow these steps to configure it:
    1. On the Tools menu, click Account Settings.
    2. Select the account you want to change.
    3. Click More Settings, and then you can change the following:
    4. On the Outgoing Server tab, you can specify whether your outgoing SMTP mail server requires authentication. This is almost always required if your ISP allows you to send e-mail messages through your ISP e-mail account when you are not
    directly connected to the ISP network, for example, if you want to send an e-mail message with your home ISP e-mail account and you are away from home connected to your work network.
    For more information about it, please refer to the following article:
    http://office.microsoft.com/en-us/outlook-help/change-email-account-settings-HP010006899.aspx#BM2
    Regards,
    Winnie Liang
    TechNet Community Support

  • OAM11g Authentication - Disabled User

    Hi,
    In OAM 11g, i am able to successfully authenticate using disabled user account. How to prevent this in OAM11g.
    I have configured OAM to authenticate against Active Directory. The user account is disabled in Active Directory. Even then if the protected application is given the disabled account credentials, OAM is allowing him the access.
    How to disabled that?
    Thanks in Advance,
    Sandeep D.

    Hi Nishith,
    You mean to say, we need to capture the disabled user account and handle in the Custom Authentication Module using the Error Codes? As per the link provided by you, they are handling using BaseUserSession class.
    What is the attribute in case of Active Directory.
    If so, can you throw some light on the BaseUserSession class. And some samples on the same.
    Thanks,
    Sandeep D.

  • FDM 11.1.1.3 Now NTLM Authentication Disabled

    Hi Everyone,
    I've just upgraded from 11.1.1.2 to 11.1.1.3. Now when I go in to the Load Balance Manager, NTLM authentication is Disabled.
    I am prompted when I try to edit that the provider type must be configured directly in Shared Services. I have an authentication type of NTLM that all other products are using.
    Does anyone know how to Enable NTLM for FDM?
    Or a work around setting up Shared services with FDM. I cannot see any FDM references in SS
    Thanks
    G

    Hi,
    Thanks for your quick reply. I have done all the upgrades and configuration you mention. All successful.
    What authentication method should be in SS and where are the references to FDM? I have NTLM & Native (OpenLDAP)
    Surely I should I see a reference to FDM in the Application groups and when I provision users. (I don't currently)
    Thanks
    G

  • Authentication disable for Lotes Notes

    Hi,
    We are facing a problem where we cant see the images coming within email (Lotus Notes). I have configured proxy setting in lotus notes but we want to disable authentication when request coming through lotus notes browser.
    I think this can be possible with user agent, does any one have idea about what could be user agent of lotus notes 8.0. i have tried below user agent but no success...
    Mozilla/4.0 (compatible; Lotus-Notes/6.0; Windows-NT)
    Mozilla/4.0 (compatible; Lotus-Notes/5.0; Windows-NT)
    Please suggest on this...

    Hi,
    to find out the user agent
    you could put in %u in the Log Subscription --> accesslog --> Custom Field
    then you can see what user agent trys to connect as I know.
    Regards
    Achim

  • OIM 11g - Kerberos Authentication disable

    Hi Experts,
    We have OIM 11g set up with Kerberos SSO authentication enabled for OIM. We want this to be disabled. Can any one help where and how I can do this?
    Thanks and Regards
    Naveen
    Edited by: user4537635 on May 16, 2013 5:52 AM

    download connetor doc from below location(RSA Authentication Manager )
    http://docs.oracle.com/cd/E11223_01/index.htm
    Else try to download the connector extract it and open the connector doc(RSA Authentication Manager 9.1.0.7.0 )
    http://www.oracle.com/technetwork/middleware/id-mgmt/downloads/connectors-101674.html

  • Windows authentication on Intranet site on IIS8.5 works when using the IP of the site, but not the URL.

    I have an intranet website on server 2012R2 with IIS8.5.
    When I access the site by IP address, the site prompts for windows authentication and it only permits access to the areas the logged in user is allowed.
    When I access the site by URL, Firefox prompts for authentication and gives the correct access, but when I access the URL from IE or Chrome, the site never prompts for credentials and the entire site is wide open to anyone.
    I have anonymous authentication disabled, Windows authentication enabled, and basic authentication enabled, set to default to our domain, so the user doesn't have to type domain\username.
    I left the site bindings open, because when I bind to an IP or host name, the intranet site stops working.
    Can anybody tell me what I am doing wrong???

    When I access the site by URL, Firefox prompts for authentication and gives the correct access, but when I access the URL from IE or Chrome, the site never prompts for credentials
    and the entire site is wide open to anyone.
    Are you accessing the site from a domain-joined workstation? It's possible that it looks wide open because IE and Chrome are using your existing Windows credentials without any prompting, whereas Firefox is not automatically using these creds so is prompting.

  • Setting Authentication and SSL Settings by folder/file in ColdFusion 10

    Am attempting to upgrade to ColdFusion 10 (patched to current level) on our development network.  We are running Windows Server 2008 R2.  On both of the below instances it worked fine with ColdFusion 8 and 9.
    On the first instance the entire site is SSL with the exception of one directory.  The entire site is set to Anonymous Authentication Disabled and Windows Authentication Enabled for the entire site except for the one directory that is not SSL.  On ColdFusion 10, that one directory that is not supposed to be SSL and have anonymous authentication will not allow access unless you hit it with an https: and authenticate.  It ignores the settings for that directory and uses the overall site settings.
    On another instance the entire site is set to Anonymous Authentication except one file (login.cfm) is set to Windows Authentication.  When you enter that site it hits the login.cfm, if you authenticate it gives you more options.  If you don't you still get in but without the extra options.  The system ignores the Windows Authentication and defaults to the overall site's setting of Anonymous Authentication.  I have tried setting the authentication at the site level to both Anonymous and Windows then going through individual directories and changing them to what they should be, but the settings are ignored and it uses the overall site settings.
    Is Tomcat somehow overriding the page/folder specific SSL and or Authentication settings?

    Charlie, I appreciate you helping rule out the possible discrepancies in the installation.  As far as server configuration, all testing is being done on two virtual Windows Sever 2008 R2 64 bit boxes running IIS 7.5  One of the boxes was upgraded from ColdFusion 9.01 and one that is a new install on a new virtual machine.  The CF9.01 box has been processing both the SSL and non-SSL properly. The only changes I made to the CF9.01 I upgraded was to turn on CGI in the IIS settings.  Both servers show the same problems so I kind of ruled out the new server vice upgrade issue.  I checked the inheritance and all of the files have the same windows user's permissions.  I have imported the SSL certificates into the JRE\security\lib\certs.  I am guessing those are imported correctly otherwise it would not allow the SSL to work at all. All SSL/windows authentication has been set up through IIS, I have not tried to modify any Tomcat settings.
    I created a .htm file and put it in both a directory that is SSL protected and one (ScheduledTasks) that is not SSL protected.  It worked fine. That is if it was in a directory that should have been protected by SSL it prompted me for my CAC and pin.  When I put it in the ScheduledTasks directory and tried opening it with a stander http:// it worked fine.  I then tried to open a .cfm in the same directory and I got the standard 403-Forbidden: Access is denied.  You do not have permission to view this directory or page using the credentials that you supplied.

  • Exchange 2013 SP1 On-prem - Disable Outlook Anonymous NTLM?

    I'm aware there is a Group Policy admin template available to force Outlook to request only NTLM or basic authentication, however, I'd like to disable Outlook Anonymous NTLM on the server side in our Exchange 2013 SP1 on-premises installation.
    Is there a method to disable Anonymous NTLM for Outlook client connections for the cas or organization?  I've tried the "Set-OutlookAnywhere" InternalClientAuthenticationMethod and ExternalClientAuthentcationMethod but Outlook is still
    able to connect with Anonymous Authentication selected for the logon network security.
    Thanks
    John Lowery

    Hi Jim,
    No luck. I checked the CAS Default Web Site\Rpc Authentication and the MBX Exchange Back End\Rpc as well, and both have Anonymous Authentication disabled.  However, Exchange still allows Outlook to establish Anonymous NTLM connections.
    My understanding is that the Authentication controls for the web site do not control the Outlook RPC over HTTP connection.
    I have been able to use an administrative template to force Outlook clients to avoid Anonymous NTLM, but I would prefer to enforce it on the CAS or MBX, because doing it on the client side causes Office 365 Exchange connection failures - there's no way to
    specify connection restrictions only for on-premises servers. See
    http://support.microsoft.com/kb/2975918.
    Thanks,
    John

  • Issue with Anonymous Authentication and updating or starting new projects

    So 2 weeks ago I had a post about Anonymous Authentication found here:
    https://social.technet.microsoft.com/Forums/office/en-US/9b0e6eec-190a-4b48-a280-6adef441659a/issue-with-anonymous-authentication-and-people-picker-and-reports?forum=sharepointgeneral&prof=required
    That issue has been resolved but has created a new issue. We have Anonymous Authentication disabled but when one of our users tries to make a new project she gets the following:
    Unexpected response from server. The status code of response is '0'. The status text of response is ''.
    When she tries to edit an existing project, she gets the following:
    The server was unable to save the form at this time. Please try again.
    If I re-enable the Anonymous Auth. everything works for her again, but then we face the issue from the original post with reports not publishing.
    Any ideas on how to make everything get along?

    #apDiv2 {
        position: absolute;
        width: 698px;
        height: 299px;
        z-index: 1;
        left:50px;
        top: 117px;
        overflow: scroll;
    Don't forget to fix your code errors.  You're still missing a <body> tag in your markup. 
    Nancy O.

  • ASA VPN QUESTION

    Hi All
    The question is pretty simple. I can successfully connect  to my ASA 5505  firewall via cisco vpn client 64 bit , i can ping any ip  address on the LAN behind ASA but none of the LAN computers can see or  ping the IP Address which is assigned to my vpn client from the ASA VPN  Pool.
    The LAN behind ASA is 192.168.0.0 and the VPN Pool for the cisco vpn client is 192.168.30.0
    I would appreciate some help pls
    Here is the config:
    ASA Version 7.2(4)
    hostname ciscoasa
    domain-name default.domain.invalid
    enable password J7NxNd4NtVydfOsB encrypted
    passwd 2KFQnbNIdI.2KYOU encrypted
    names
    name 192.168.0.11 EXCHANGE
    name x.x.x.x WAN
    name 192.168.30.0 VPN_POOL2
    interface Vlan1
    nameif inside
    security-level 100
    ip address 192.168.0.1 255.255.255.0
    interface Vlan2
    nameif outside
    security-level 0
    ip address WAN 255.255.255.252
    interface Ethernet0/0
    switchport access vlan 2
    <--- More --->
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    boot system disk0:/asa724-k8.bin
    ftp mode passive
    clock timezone EEST 2
    clock summer-time EEDT recurring last Sun Mar 3:00 last Sun Oct 4:00
    dns server-group DefaultDNS
    domain-name default.domain.invalid
    object-group protocol TCPUDP
    protocol-object udp
    protocol-object tcp
    access-list nk-acl extended permit tcp any interface outside eq smtp
    access-list nk-acl extended permit tcp any interface outside eq https
    access-list customerVPN_splitTunnelAcl standard permit 192.168.0.0 255.255.255.0
    access-list inside_nat0_outbound extended permit ip 192.168.0.0 255.255.255.0 VPN_POOL2 255.255.255.0
    access-list inside_access_in extended permit ip any any
    access-list VPN_NAT extended permit ip VPN_POOL2 255.255.255.0 192.168.0.0 255.255.255.0
    pager lines 24
    logging enable
    logging asdm informational
    mtu inside 1500
    mtu outside 1500
    ip local pool VPN_POOL2 192.168.30.10-192.168.30.90 mask 255.255.255.0
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-524.bin
    no asdm history enable
    arp timeout 14400
    global (inside) 10 interface
    global (outside) 1 interface
    nat (inside) 0 access-list inside_nat0_outbound
    nat (inside) 1 0.0.0.0 0.0.0.0
    nat (outside) 10 access-list VPN_NAT outside
    static (inside,outside) tcp interface smtp EXCHANGE smtp netmask 255.255.255.255
    static (inside,outside) tcp interface https EXCHANGE https netmask 255.255.255.255
    access-group inside_access_in in interface inside
    access-group nk-acl in interface outside
    route outside 0.0.0.0 0.0.0.0 x.x.x.x 1
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    aaa authentication enable console LOCAL
    aaa authentication http console LOCAL
    aaa authentication serial console LOCAL
    aaa authentication ssh console LOCAL
    aaa authentication telnet console LOCAL
    aaa authorization command LOCAL
    http server enable
    http 192.168.0.0 255.255.255.0 inside
    snmp-server host inside 192.168.0.16 community public
    no snmp-server location
    no snmp-server contact
    snmp-server community public
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto dynamic-map outside_dyn_map 20 set pfs group1
    crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
    crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp policy 10
    authentication pre-share
    encryption 3des
    hash sha
    group 2
    lifetime 86400
    crypto isakmp nat-traversal  20
    telnet 192.168.0.0 255.255.255.0 inside
    telnet timeout 5
    ssh timeout 5
    console timeout 0
    dhcp-client client-id interface outside
    dhcpd dns 217.27.32.196
    dhcpd address 192.168.0.100-192.168.0.200 inside
    dhcpd dns 192.168.0.10 interface inside
    dhcpd enable inside
    group-policy DfltGrpPolicy attributes
    banner none
    wins-server none
    dns-server none
    dhcp-network-scope none
    vpn-access-hours none
    vpn-simultaneous-logins 3
    vpn-idle-timeout 30
    vpn-session-timeout none
    vpn-filter none
    vpn-tunnel-protocol IPSec l2tp-ipsec
    password-storage disable
    ip-comp disable
    re-xauth disable
    group-lock none
    pfs disable
    ipsec-udp disable
    ipsec-udp-port 10000
    split-tunnel-policy tunnelall
    split-tunnel-network-list none
    default-domain none
    split-dns none
    intercept-dhcp 255.255.255.255 disable
    secure-unit-authentication disable
    user-authentication disable
    user-authentication-idle-timeout 30
    ip-phone-bypass disable
    leap-bypass disable
    nem disable
    backup-servers keep-client-config
    msie-proxy server none
    msie-proxy method no-modify
    msie-proxy except-list none
    msie-proxy local-bypass disable
    nac disable
    nac-sq-period 300
    nac-reval-period 36000
    nac-default-acl none
    address-pools none
    smartcard-removal-disconnect enable
    client-firewall none
    client-access-rule none
    webvpn
      functions url-entry
      html-content-filter none
      homepage none
      keep-alive-ignore 4
      http-comp gzip
      filter none
      url-list none
      customization value DfltCustomization
      port-forward none
      port-forward-name value Application Access
      sso-server none
      svc none
      svc keep-installer installed
      svc keepalive none
      svc rekey time none
      svc rekey method none
      svc dpd-interval client none
      svc dpd-interval gateway none
      svc compression deflate
    group-policy customerVPN internal
    group-policy customerVPN attributes
    dns-server value 192.168.0.10
    vpn-tunnel-protocol IPSec
    password-storage enable
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value customerVPN_splitTunnelAcl
    default-domain value customer.local
    username xxx password 8SYsAcRU4s6DpQP1 encrypted privilege 0
    username xxx attributes
    vpn-group-policy TUNNEL1
    username xxx password C6M4Xy7t0VOLU3bS encrypted privilege 0
    username xxx attributes
    vpn-group-policy PAPAGROUP
    username xxx password RU2zcsRqQAwCkglQ encrypted privilege 0
    username xxx attributes
    vpn-group-policy customerVPN
    username xxx password zfP8z5lE6WK/sSjY encrypted privilege 15
    tunnel-group customerVPN type ipsec-ra
    tunnel-group customerVPN general-attributes
    address-pool VPN_POOL2
    default-group-policy customerVPN
    tunnel-group customerVPN ipsec-attributes
    pre-shared-key *
    tunnel-group-map default-group DefaultL2LGroup
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum 512
    policy-map global_policy
    class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny
      inspect sunrpc
      inspect xdmcp
      inspect sip
      inspect netbios
      inspect tftp
    service-policy global_policy global
    prompt hostname context
    Cryptochecksum:a4dfbb82008f78756fe4c7d029871ec1
    : end
    ciscoasa#                           

    Well lots of new features have been hinted at for ASA 9.2 but I've not seen anything as far as an Engineering Commit or Customer Commit for that feature.
    Site-site VPN in multiple context mode was added in 9.0(1) and I have customers have been asking for the remote access features as well.
    I will remember to ask about that at Cisco Live next month.

  • ASA 5505 VPN client LAN access problem

    Hello,
    I'm not expert in ASA and routing so I ask some support the following case.
    There is a Cisco VPN client (running on Windows 7) and an ASA5505.
    The goals are client could use remote gateway on ASA for Skype and able to access the devices in ASA inside interface.
    The Skype works well but I cannot access devices in the interface inside via VPN connection.
    Can you please check my following config and give me advice to correct NAT or VPN settings?
    ASA Version 7.2(4)
    hostname ciscoasa
    domain-name default.domain.invalid
    enable password wDnglsHo3Tm87.tM encrypted
    passwd 2KFQnbNIdI.2KYOU encrypted
    names
    interface Vlan1
    nameif inside
    security-level 100
    ip address 192.168.1.1 255.255.255.0
    interface Vlan2
    nameif outside
    security-level 0
    ip address dhcp setroute
    interface Vlan3
    no forward interface Vlan1
    nameif dmz
    security-level 50
    no ip address
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    ftp mode passive
    dns server-group DefaultDNS
    domain-name default.domain.invalid
    same-security-traffic permit inter-interface
    same-security-traffic permit intra-interface
    access-list inside_access_in extended permit tcp 192.168.1.0 255.255.255.0 any
    access-list inside_access_in extended permit udp 192.168.1.0 255.255.255.0 any
    access-list outside_access_in extended permit ip any 192.168.1.0 255.255.255.0
    pager lines 24
    logging enable
    logging asdm informational
    mtu inside 1500
    mtu outside 1500
    mtu dmz 1500
    ip local pool VPNPOOL 10.0.0.200-10.0.0.220 mask 255.255.255.0
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-524.bin
    no asdm history enable
    arp timeout 14400
    nat-control
    global (outside) 1 interface
    nat (inside) 1 10.0.0.0 255.255.255.0
    nat (inside) 1 192.168.1.0 255.255.255.0
    nat (outside) 1 10.0.0.0 255.255.255.0
    access-group inside_access_in in interface inside
    access-group outside_access_in in interface outside
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    aaa authentication ssh console LOCAL
    http server enable
    http 192.168.1.0 255.255.255.0 inside
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto dynamic-map outside_dyn_map 20 set pfs group1
    crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
    crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp policy 10
    authentication pre-share
    encryption 3des
    hash sha
    group 2
    lifetime 86400
    telnet timeout 5
    ssh 192.168.1.0 255.255.255.0 inside
    ssh timeout 5
    ssh version 2
    console timeout 0
    dhcpd auto_config outside
    dhcpd address 192.168.1.2-192.168.1.33 inside
    dhcpd dns xx.xx.xx.xx interface inside
    dhcpd enable inside
    group-policy DfltGrpPolicy attributes
    banner none
    wins-server none
    dns-server value 84.2.44.1
    dhcp-network-scope none
    vpn-access-hours none
    vpn-simultaneous-logins 3
    vpn-idle-timeout 30
    vpn-session-timeout none
    vpn-filter none
    vpn-tunnel-protocol IPSec l2tp-ipsec webvpn
    password-storage disable
    ip-comp disable
    re-xauth disable
    group-lock none
    pfs disable
    ipsec-udp disable
    ipsec-udp-port 10000
    split-tunnel-policy tunnelall
    split-tunnel-network-list none
    default-domain none
    split-dns none
    intercept-dhcp 255.255.255.255 disable
    secure-unit-authentication disable
    user-authentication disable
    user-authentication-idle-timeout 30
    ip-phone-bypass disable
    leap-bypass disable
    nem enable
    backup-servers keep-client-config
    msie-proxy server none
    msie-proxy method no-modify
    msie-proxy except-list none
    msie-proxy local-bypass disable
    nac disable
    nac-sq-period 300
    nac-reval-period 36000
    nac-default-acl none
    address-pools none
    smartcard-removal-disconnect enable
    client-firewall none
    client-access-rule none
    webvpn
      functions url-entry
      html-content-filter none
      homepage none
      keep-alive-ignore 4
      http-comp gzip
      filter none
      url-list none
      customization value DfltCustomization
      port-forward none
      port-forward-name value Application Access
      sso-server none
      deny-message value Login was successful, but because certain criteria have not been met or due to some specific group policy, you do not have permission to use any of the VPN features. Contact your IT administrator for more information
      svc none
      svc keep-installer installed
      svc keepalive none
      svc rekey time none
      svc rekey method none
      svc dpd-interval client none
      svc dpd-interval gateway none
      svc compression deflate
    group-policy XXXXXX internal
    group-policy XXXXXX attributes
    vpn-tunnel-protocol IPSec
    split-tunnel-policy tunnelall
    split-tunnel-network-list none
    username XXXXXX password G910DDfbV7mNprdR encrypted privilege 15
    username XXXXXX password 5p9CbIe7WdF8GZF8 encrypted privilege 0
    username XXXXXX attributes
    vpn-group-policy XXXXXX
    username XXXXX password cRQbJhC92XjdFQvb encrypted privilege 15
    tunnel-group XXXXXX type ipsec-ra
    tunnel-group XXXXXX general-attributes
    address-pool VPNPOOL
    default-group-policy XXXXXX
    tunnel-group XXXXXX ipsec-attributes
    pre-shared-key *
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum 512
    policy-map global_policy
    class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny
      inspect sunrpc
      inspect xdmcp
      inspect sip
      inspect netbios
      inspect tftp
      inspect icmp
    service-policy global_policy global
    prompt hostname context
    Cryptochecksum:a8fbb51b0a830a4ae823826b28767f23
    : end
    ciscoasa#
    Thanks in advance!
    fbela

    config#no nat (inside) 1 10.0.0.0 255.255.255.0 < This is not required.
    Need to add - config#same-security-traffic permit intra-interface
                                     #access-list extended nonat permit ip 192.168.1.0 255.255.255.0 10.0.0.0 255.255.255.0
                                     #nat (inside) 0 access-list nonat
    Please add and test it.
    Thanks
    Ajay

Maybe you are looking for