How to configure cisco anyconnect on a Cisco ASA

NOYNIM# conf t

NOYNIM(config)#webvpn

NOYNIM(config-webvpn)#enable outside

//Specify the anyconnect pkg package you are going to use.  Use the ‘sh disk0:’ command to determine what package you have.  For our demonstration the latest package was anyconnect-win-3.0.5080-k9.pkg

NOYNIM(config-webvpn)# svc image disk0:/anyconnect-win-3.0.5080-k9.pkg

NOYNIM(config-webvpn)# svc enable

NOYNIM(config-webvpn)# tunnel-group-list enable

NOYNIM(config-webvpn)# tunnel-group noynimvpn webvpn-attributes

NOYNIM(config-tunnel-webvpn)# group-alias  noynimvpn

//the tunnel-group noynimvpn is a group policy that needs to be defined.  Below is an example of a group policy:

group-policy noynimvpn internal

group-policy noynimvpn attributes

dns-server value 192.168.0.1

vpn-tunnel-protocol IPSec svc webvpn

split-tunnel-policy tunnelspecified

split-tunnel-network-list value split

default-domain value example.local

//you will also need to create a username locally or use the AD credentials if you have radius authentication setup.

To add a user use the ‘username’ command

Once you have configured the webvpn settings you can simply browse to your public IP and you will get prompted for your credentials.  Enter them and you will be able to download and run the anyconnect client.

Use the below command to see if you have a successful connection:

sh vpn-sessiondb svc

NOYNIM continues to be the best Denver IT Consulting provider out there.  We understand that small-mid sized organizations demand the best and that’s the service we provide.  Many of the Cisco ASAs that we see are not configured securely and are not optimized for network performance.  Please call us today at 720.524.8616 to speak to one of our professionals.  NOYNNIM provides Denver IT Consulting services that no other company can match.  In addition to our experts we have a 100% money back guarantee on all of our work.  If at any time you are not satisfied with our final product we will do everything we can to correct it.  After correction if you are still unsatisfied we will fully refund your money.

Call Denver’s premier IT consulting firm today for a special new customer discount.

Please follow this procedure to setup console access with Fortinet’s console cable :

1. Use the RJ-45 to DB-9 (or DB-9 to DB-9) serial cable and converter to connect the FortiGate Console port to the management computer serial port.
2.Start a terminal emulation program (HyperTerminal) on the management computer. Use these settings: Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
3.Do a hard reboot of your Fortigate. You must then enter your password within 30secs of powering up at the prompt.
4.At the Login: prompt, please use following procedure to recover password

FG login: maintainer
Password: bcpbYOURSERIALNUMBER (Note that the letters are upper case, no
spaces)

Press “Enter”

FG# conf sys admin
(admin)# edit admin
(admin)# set password xxxxxx<<this will be whatever password, (minimum of four characters) you prefer (admin)# end FG#

Now you should be able to log back in to the device from the gui, with the admin username and the password you’ve just set.

Note : You will need the console cable that came with the device (RJ45 to Serial). Connect to the device using “Hyperterminal”. From the time of reboot, you have 14 seconds to enter the login ID and password. Copy the login (maintainer) and password (bcpbYOURSERIALNUMBER) to Notepad/Wordpad. When prompted “copy and paste” this information.

Errors : The “hashed password” error notes that the login/password have not been entered in the time allowed. Reboot the device and “copy and paste” the login/password

Log correlation is very important in order to pinpoint security vulnerabilities and react promptly to incidents.  SIEMs provide a way to implement sophisticated logic in order to obtain meaningful data. 

SIEMs and Denver Computer Services firm NOYNIM help safeguard your business by giving you complete visibility into activity across the IT infrastructure: external threats such as malware and hackers; internal threats such as data breaches and fraud; risks from application flaws and configuration changes; and compliance pressures from failed audits.

NOYNIM can help you implement the industry’s leading s SIEM products for collecting, analyzing and assessing security and risk event information. The result is rapid identification, prioritization and response to policy breaches, cybersecurity attacks and insider threats.  NOYNIM can help you correlate logs, user roles, and network flows to understand the who, what and where of information security.  

Denver’s leading IT service provider, NOYNIM, feels it is very important to start offering our clients SIEM design, implementation and support.  Organizations are facing sophisticated IT threats daily and have to meet rigorous compliance requirements.  Whether you have commercial or government regulations to meet, NOYNIM is here to help.  Contact us today at 720.524.8616 to schedule a meeting with one of our SIEM experts.

NOYNIM has implemented multiple SIEM solutions to various organizations.  We can setup large deployments as well as small one appliance solutions.

Our engineers are experts with RSA Envision, LogRhythm and HP ArcSight

1.       Exchange power shell with elevated rights :

   C:\Windows\system32>Get-TransportAgent

Identity                                           Enabled         Priority

——–                                           ——-         ——–

Connection Filtering Agent       True            1

Content Filter Agent                    True           2

Sender Id Agent                            True            3

Sender Filter Agent                     True            4

Recipient Filter Agent                 True            5

Protocol Analysis Agent              True           6

SMSMSERoutingAgent                True           7

SMSMSESMTPAgent                    True           8

Transport Rule Agent                   True           9

Journaling Agent                           True           10

AD RMS Prelicensing Agent      False          11

2.       Disable the Symantec transport agent — SMSMSERoutingAgent,SMSMSESMTPAgent

                   –restart the Microsoft Exchange Mail Submission

3.       You may need to reboot

error messages on secure IMAP clients, and forcing client access imap4 to tls on port 143 won’t allow you to connect unsecurely.

Solution:

TLS must have a certificate enabled on IMAP.

Must be done in the Exchange Management Shell:

Get-ExchangeCertificate
this will give you the thumprints of existing certificates in exchange. If you don’t have one with an I in “Services” you will need to enable one.

Enable-ExchangeCertificate -Thumbprint 66yourthumbprint5532E1450907958EC9D2F1E1A3 -Services IMAP
This will enable the certificate on IMAP4/tls. If you do not enable a certificate, you cannot connect with tls (and likely SSL)

Then restart 
Microsoft Exchange IMAP4

If you have credential errors after the fact, try DOMAIN\username

1. VOIP and Data packets are completely segregated using different physical hardware.

2.  VOIP and Data packets use the same network hardware infrastructure

The downside of the first design method is that a company is building out two networks when VOIP and data should converge on the same network hardware.  There is no reason why someone should run a CAT5e/6/7 cable to a phone and a separate one to a computer.  In addition, this setup requires two of everything (two cables, two switches, two firewalls, etc).  While in a very small business (5 users) you may justify it, imagine this being recommended to a 5,000 user environment.  By referencing the above document you can clearly see the hardware duplications and extra expenditure.

The second approach is ideal, but is usually never setup and configured properly.  In most cases design 2 is architected in a way where the voice and data traffic are never segregated and voice traffic is never prioritized.

In order to setup everything properly you need to hire the best Denver computer services organization, which is NOYNIM.  All of the services that we provide are based on our years of experience working in fortune 50 companies.  Not only do we possess the most talented individuals in Denver we also have the most advanced certifications.  NOYNIM is the only Denver computer services company that has a CCIE on staff.  There is no company supporting small-mid sized businesses that has a CCIE on their staff.  Contact NOYNIM today at 720.524.8616 to receive your free three hour network assessment.

• Complete installation and configuration
• Rebranding for your organization
• Training
• Customization
• Complete interface integration with your current tool
• Email notifications, communication and management

Please call us today for an OTRS quote at sales@noynim.com or 720.524.8616 x 1.  We have the most completive pricing when it comes to OTRS consulting.

Denver CCIEs are very hard to come by, but possess expert knowledge of Cisco Systems networking.  Hands down the CCIE is the hardest IT certificate in the industry.  On top of a rigorous test one has to fly out to a select number of locations throughout the world to pass a lab test.  Candidates must take the CCIE lab within 18 months of passing the written test.

Most small-mid sized businesses don’t know what Denver CCIE means, but rest assured this is the highest certification in the industry. 

Cisco introduced the CCIE certification in 1993 to assist the industry in distinguishing the top echelon of internetworking experts worldwide. Today , CCIE certification holders represent less than 3% of all certified Cisco professionals and less than 1% of the networking professionals worldwide.

We have the following hard drives for sale:

Western Digital WD Caviar 205AA

S/N WMA0W 140 7267

MDL: WD205AA-53ANA0

DATE: 04 Mar 2000

DCM HRBH EQHHO

20.5GB IDE

Seagate

S/N: 9VY2RVCC

ST 3250318AS

P/N: 9SL131-033

FIRMWARE: CC44

WWN: 5000C500198B61DE

DATE CODE: 10122

SITE CODE: TK

Barracudea 7200 250GB SATA

Western Digital

WD2500KS

WD CAVIAR SE16

MDL: WD2500KS – 00MJB0

DATE: 14 AUG 2006

DCM: DBBHYTJAAB

LBA 488397168

250gb sata

IBM Ultrastar

Model: DPSS-309170

9.1 GB SCSI

RPM 7200

IBM p/n: 07N3720

IBM FRU: 19K1479

RPM: 7200RPM

MLC: PS0S94

Quantum Fireball

P/N LB05A011 Rev 01-A

SN 871009017689 DGPXX

HP

3.5 Series 72.8GB 15,000 SCSI

Model: BF07287B55

PN: 356914-002

DPN: 3R-A5099-AA

CT:27B5501H1R75NH

FIRMWARE: HPB1

GPN: 271837-018

DATE: 09JAN2005

HP

3.5 Series 72.8GB 15,000 SCSI

MODEL: BF07284961

P/N: 443188-001

DPN: 3R-A7346-AA

CT: 24961013SV80MN

CT: 24961013SV80MN

HP GPN: 404670-007

FIRMWARE: HPB5

HP

3.5 Series 72.8GB 15,000 SCSI

MODEL: BF072863B6

PART# 306641-003

DPN: 3R-A4141-AA

CT: 263B601CXQF0Y2

DATE: 2004-06 DE REV A

GPN: 271837-014

HP

3.5 Series 72.8GB 15,000 SCSI

MODEL#: BF07289BC4

PART#: 365699-008

DPN: 3R-A6186-AA

CT: 29BC401CXT74WK

DATE 2006-05 DE REV A

GPN: 404670-007

HP

3.5 Series 72.8GB 15,000 SCSI

MODEL NUMBER: BF07285A36

DRIVE CPN: 286774-006

CT: 25A36016CQQ5JA

LOT NUMBER: A-01-0510-5

FACTORY PN: 9U8006-038

DRIVE DPN: 3R-A3847-AA

If you are interested in any of these drives please email us at sales@noynim.com with the HD you want and the price you are willing to pay.