Solved

Cannot connect to Cisco Pix due to a Certificate error.

Posted on 2009-05-19
9
671 Views
Last Modified: 2012-06-27
When attempting to connect to our Cisco Pix device vie IE I get a "Certificate Error". I have had to obtain new certificates for our ADP software from Bank Of America so I am familiar with installing new certs but I am new to this position that I now hold and there is no one here to guide me threw this one.

I was wondering where I would get a new cert from. Would it be Cisco or am I just lost? Can someone please help me? If you need any additional information I will be more than happy to provide it.

Thank you in advanced
Michael
0
Comment
Question by:bvrmnky46
  • 5
  • 4
9 Comments
 
LVL 13

Expert Comment

by:3nerds
ID: 24422097
bvrmnky46,

Are you just attempting to administer this device? If so then the expired certificate will have no bearing for you. As you will be the only one connecting to it. I will warn you though the PVDM is a bad/flaky way to administer this device imho.

It doesn't need a certificate to function and it doesn't support SSL VPN so would you  be able to explain what you were doing when you ran into this error.

Regards,

3nerds
0
 

Author Comment

by:bvrmnky46
ID: 24423527
Actually I was attempting to connect so that I can reroute my incoming SMTP to another IP on our network. I have installed a new spam/virus filter.

I attempted to connect to it like so https://ip address

I get a "please wait" while connecting and nothing but that cert error is present.
0
 
LVL 13

Accepted Solution

by:
3nerds earned 500 total points
ID: 24423676
Pix used an early gui called a PVDM it was unstable. It may not be loading simply because in your device it is not working.

I tried to stay away from the PVDM. The new ASDM is much nicer.

If you would like assistance with these changes via command line I would be glad to help.

You will need to get a tool like putty to connect to the device via ssh, you could even try to connect to the device via telnet as that may be open to it as well it depends on the config.

try this.

open a command prompt and type the following:
telnet <device IP>
and hit enter.

If it doesn't connect download putty and try to connect via that.

Once you are in the device do a show run and copy the output and paste it here. If you don't want to paste your whole config just past your lines in regard to STATIC.

MAKE SURE YOU XX OUT any USERNAMES, PASSWORDS OR IP ADDRESSES. I don't want you opening yourself up to any one messing with you and that info would let them right in.

Good Luck,

3nerds
0
 

Author Comment

by:bvrmnky46
ID: 24423820
I did a telnet and got in but then I'm a bit confused by the "show run" what exactly do I do?

I'm sorry but obviously I am not familiars at all whit this unit or Cisco for that matter.

Thank you!
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 
LVL 13

Expert Comment

by:3nerds
ID: 24423951
are you at a

>

or a

#

for a prompt?

If your at the >
type
>en
hit enter
it should prompt you for a password

if your at the #
type
#sh ru
hit enter

lots of code will show up on your screen.

Good Luck,

3nerds
0
 

Author Comment

by:bvrmnky46
ID: 24424061
I did the #sh ru and seen all the configurations. I need to make some changes and maybe this is far to much to ask. Let me know and I will continue.

Thank you so far by the way. You are way cool!!
0
 
LVL 13

Expert Comment

by:3nerds
ID: 24424109
I need to see the code you are seeing, to help further.

I don't know what the rules are for "going to far" per say are but if you want to post the code I will see what I can do.

If you want to start a new post let me know I can help you there as well.

Your call on that one.

In your config you should see some lines that start with the word "Static" to start out I specifically need those lines but the whole config may be necessary.

Good Luck,

3nerds

0
 
LVL 13

Expert Comment

by:3nerds
ID: 24435125
Just checking to see if you still need assistance?
0
 

Author Closing Comment

by:bvrmnky46
ID: 31582996
Thanks for your help. I have to stop here because I found our support information from Cisco.. lol, better for me!!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now