Cannot access the ISE-3395-K9 CISCO Web GUI

Similar Questions

• Cannot access the internal network with Cisco easy vpn client RV320

  I have a cisco RV320 (firmware v1.1.1.06) and created a tunnel easy vpn (= split tunnel tunnel mode), then I installed the cisco client vpn v5.0.07.0290 in Windows 7 64 bit, I can connect to the vpn, but I do not see the other pc ping nor them, no idea?

  Thank you

  Hello

  1. is the firewall on the active Windows 7 computer? If so, please disable it

  2. can you check that you get a correct IP address in the range of the POOL of IP configured?

  3. When you perform the tracert command to access an internal server, it crosses the VPN¨?

  4. is the tunnel of split giving you access to internal IP subnets defined?

  5. on the RV320 you see the user connected and sending and receiving bytes?

  Don t forget to rate and score as correct the helpful post!

  David Castro,

  Kind regards

• Cannot access the server gmail via any web browser; code 105 error message cannot access server

  Remember - this is a public forum so never post private information such as numbers of mail or telephone!

  Ideas: have cleared cache, spilled all saved passwords and I can not even access accounts gmail via Google Chrome; Internet Explorer or Firefox... I can not access through my laptop but can access files in gmail on other public computers

  • You have problems with programs
  • Error messages
  • Recent changes to your computer
  • What you have already tried to solve the problem

  http://www.Google.com/support/forum/p/chrome/thread?TID=1b6ea4f035dadc16&hl=en

• Cannot access the AIP SSM via ASDM

  CISCO recommendations below:

  Cannot access the AIP SSM via ASDM

  Problem:

  This error message appears on the GUI.

  Error connecting to sensor. Error Loading Sensor error

  Solution:

  Make sure that the IPS SSM management interface is up/down and check his IP address configured, default gateway and the subnet mask. It is the interface to access the software from Cisco Adaptive Security Device Manager (ASDM) on the local computer. Try to ping the address of management of IPS SSM IP interface on the local computer that you want to access the ASDM. If it is impossible to do a ping check the ACLs on the sensor

  ----------------------------------------------------------------------------------------------------------------------------------------------

  I've tried everything recommended above. I can ping the host ASDM the FW and the SSM-10 module. Well, I ping the host machine and the SSM of the ASDM. I opened as wide as possible ACL. I changed the IP addresses and masks several times. The management of the ASA port and the SSM and the PC are on the same subnet.

  A trace of package from the PC to the SSM shows that it is blocked by an ACL rule, and yet I opened wide.   I've seen this kind of problem before and it was solved by applying the double static NAT, but I don't know how to do that if all the IP addresses are on the same subnet.

  Tried everything, need help from high level.

  The IDM software that comes with ASDM does not support java 1.7. The portion of the ASDM ASA supports 1.7 but launch the IPS cmdlet works only with 1.6. The TAC enginner suggested that I use the IME (IPS Manager Express) which is available for free on the Cisco's (http://www.cisco.com/en/US/products/ps9610/tsd_products_support_general_information.html) Web site.

  I've been playing with it today, and so far it seems to work pretty well.

• I cannot access the application "contact me" when a website, get error "Default Mail Client not properly installed."

  I cannot access the application 'contact me' when a web site and receive the answer "Default Mail Client not properly installed" instead of going on the requested site.

  How can I fix this problem?

  Separated from the:

  http://answers.Microsoft.com/en-us/IE/Forum/IE8-windows_other/IE8-default-mail-client-not-properly-installed/23c2a9e1-d1fa-4a50-aeb1-90a6f2af717f

  CrystalBall © SEZ...

  Unlike Windows XP & Vista, Windows 7 does not include a default email Client. [What were thinking?]

  You will need to install a (e.g. MS Outlook;) Windows Live Mail; Thunderbird) , and then set it as a default for mail in CUSTOM (<>) article in Set Program Access and defaults of the computer , then restart your computer before any function send to or MailTo will become available.

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  In these forums, you will find support for Windows Live Mail: http://windowslivehelp.com/forums.aspx?productid=15

• Receives the following message after opening a downloaded game: 'Windows cannot access the specified device, path or file. You can not have the appropriate permissions to access the item.

  Hello!
  So I'm at the end of my rope with this one... it lasts for months, and I keep revisitng every two weeks to try and fix that and every time to be completely frustrated.  I found this forum tonight, so here goes...

  We downloaded a few games on the HP Games Web site.  We download them and everything works fine.  Then, we will open the games and this pop up error message:
  "Windows cannot access the specified device, path or file.  You can not have the appropriate permissions to access the item.

  These games used to run fine, and I have no idea why they now have problems.  We have a Vista operating system, 1 account who is the administrator, the Parental control is disabled (or if we believe).

  If anyone can please help it would be much appreciated!  We have a monthly membership to this site of game and continue to accumulate credits, but may not use it.  It makes us crazy!

  Thank you in advance!

  Hello Heathie,

  Thank you for posting.  It seems that the program is no longer on your computer.  This can happen if the game files are deleted, but the game itself has not been uninstalled correctly.  I recommend you to download the game again to a location on your computer where you can easily find and install it.  This should fix the problem.

  Please let me know if this helps you.
  Zack
  Engineer Microsoft Support answers visit our Microsoft answers feedback Forum and let us know what you think.

• RootKit/Malware/Virus problem - windows cannot access the specified device file or the path, you don't have permissions

  Hello

  I have a problem with my computer it has been infected by a virus that is not visible in normal mode. It prevents running any application that would help in the detection and removal. I tried running mrt, mcaffe, trendmicro rootkit detector rootkit detector, spybotSD, analysis windows Defender online Windows live onecar. All these works for a minute and then shutsdown, when I click it again I get the error, as mentioned in the title, 'windows cannot access the specified device file or the path, you do not have permissions.

  This problem has a solution or re - install is the only way out?

  The pointers/help appreciated.

  Just to add, I am able to connect using my last known good configuration and only safe mode configurations.

  Thank you

  Id2View,

  1. follow all the instructions in this thread: How to get rid of malware

  2. If still no joy you can find Microsoft MVPs and other trained analysts on the following support sites:
  Aumha.org
  Atribune.org
  SpywareHammer
  BleepingComputer
  Safer-Networking

  3. If you need help with virus-related issues, contact the Support Services Microsoft product.

  To support the Canada and the United States, call toll-free (866) PCSAFETY (727-2338).

  For support outside the United States and the Canada, visit the page Web of Product Support Services.

  4. If you need more assistance for the position of the newsgroup Microsoft - security - virusvirus/worm.
  Through your News Reader:
  News://msnews.Microsoft.com/Microsoft.public.Security.virus
  Via the Web:
  http://www.Microsoft.com/communities/newsgroups/list/en-us/default.aspx?DG=Microsoft.public.Security.virus

  Hope this helps,

  Vincenzo Di Russo - Microsoft MVP Windows Internet Explorer, Windows Desktop Experience & security - since 2003. ~ ~ ~ My MVP profile: https://mvp.support.microsoft.com/profile/Vincenzo

• Windows cannot access the specified device, path or file. You can not have the appropriate permissions to access the item.

  Hello

  I recently changed to use AVG free Antivirus Vista 2010 edition and since then (next day) seems to be locked out almost everything on the computer other then IE.  Open any kind of .exe translates into "Windows cannot access the specified device, path or file. You don't have the appropriate permissions to access the item. "I can access the Control Panel, but when I try to run something (a user restore Sys account) nothing happens or I get the same error.  I can not even access/cmd?

  Operating system is vista 64 bit home premium
  Computer has 1 which is defined as administrator SP1
  Tried to do a restore of the system in normal mode and safe, the two will not start.

  I have a feeling I know what the problem is, that when you look at the properties > Security "Progam files" in the 5 groupnames user administrator has not enabled in the lower area of permissions?  Guess a virus has locked all accounts to use the machine key files? (When editing and allowing the admin to have full control etc. in written authorization, I get an "access denied" Message.)  Be honest this really problems out of my PC knowledge, I would usually just reformat if I hit I can't solve a problem, but this time reformating is not the best option.

  Thanks in advance for any help, I would really appreciate it, it left me speechless!

  PS. read through the similar questions and have used the "fix windows' programs, with nothing working or me being not able to access something used.

  Hi Dany88,

  First of all, I would say that you uninstall security antivirus vista 2010 of computer software, since there are several questions on the computer after installing. This software may have created conflicts between other programs on the computer.

  As you face problems to access items from 'Control panel', I would say you visit the security software vendor's Web site and search a tool of suppression using which you can uninstall the software.

  Important: Antivirus software can help protect your computer against viruses and other security threats. In most cases, you should not disable your antivirus software. If you do not disable temporarily to install other software, you must reactivate as soon as you are finished. If you are connected to the Internet or a network during the time that your antivirus software is disabled, your computer is vulnerable to attacks.

  If questions are set after uninstalling security software, I suggest that you change the security antivirus vista to some else software or contact the vendor of the software for more information.

  I would also say that you are investigating the computer by using the methods mentioned in the link below.
   
  How to get rid of malware or viruses
  http://social.answers.Microsoft.com/forums/en-us/vistasecurity/thread/ba80504b-61f1-4D71-960f-b561798b7b42

  See the link below to find out how to start in safe mode.
  Start your computer in safe mode
  http://Windows.Microsoft.com/en-us/Windows-Vista/start-your-computer-in-safe-mode

  I hope this helps!

  Halima S - Microsoft technical support.
  Visit our Microsoft answers feedback Forum and let us know what you think.

• Error message: Windows cannot access the specified device path and the second user cannot access the internet

  Original title: I have two users on Vista. We get to the top with windows can not access the specified device path.etc. The other has no problem

  The second user cannot access the internet. Can't access window appears. The other user is not problems.

  Hi Rickravel,

  1. what type of account you use?

  2. This only happens when you access Internet?

  3. when the problem started?

  4. you remember to make changes to the computer before this problem?

  Step 1:

  You can start in safe mode with network and see if the problem occurs in the account.

  You can see the following link to start in safe mode with network.

  Start your computer in safe mode

  Note: Restart the computer to boot into normal mode.

  Step 2:

  If you use Internet explorer, then you can try to disable add ons and check if it helps:

  Run Internet explorer with no Add - ons. Steps to open Internet with no mode of modules:

  a. click on start

  (b) in the search box, type in Internet explore

  c. Select Internet (no add-on mode)

  If you were able to access the Web site without any problems, then the module may cause the error.

  You can read the following article and try the steps to activate the modules individually determine which Add - ons may be the cause of the problem.

  How the modules of the browser affect my computer?

  Hope this information is useful.

• Error message "Windows cannot access the specific device, a file, or a path. "/ setupstb.exe".

  One offers a solution to my problem of Vista Home Premium that prevents me to access my Microsoft Web Cam (also "glik' won't let me upload files.). Thank you very much in anticipation. Tony

  Hello

  Please only post the same question once in these forums

  an answer another thread

  http://answers.Microsoft.com/en-us/Windows/Forum/windows_vista-windows_install/error-message-Windows-cannot-access-the-specific/603544f6-b346-E011-86fd-d485645a8348?page=1&TM=1299283083484#footer

• Cannot access the network ERR_NETWORK_ACCESS_DENIED

  I have Windows 7.  Nothing works, I tried chrome (which will not even load) and Firefox (it has been a constant problem with gmail for well over a year).

  Cannot access the network

  ERR_NETWORK_ACCESS_DENIED
  Google Chrome has access to the network.

  Maybe it's because your firewall or antivirus software wrongly think that Google Chrome is an intruder on your computer and it blocks to connect to Internet.

  Chrome allow access to the network in your firewall or anti-virus settings.

  If it is already listed as a program allowed to access the network, try to remove from the list and Add again.

  I tried the above, but can't seem to solve the problem.  Thank you.

  Hello Paul,

  Thanks for posting your question on the Microsoft Community.

  I would like to know some information about the problem so that we can help you better.

  The same problem occurs when you use Internet explorer?

  Thank you for details on the question and your efforts to resolve.

  If the problem also occurs when you use Internet explorer, I suggest you use the steps in this article and check if it helps.
  Reference:
  Can't access some Web sites in Internet Explorer
  https://support.Microsoft.com/en-us/KB/967897

  Note: The feature reset the Internet Explorer settings can reset security settings or privacy settings that you have added to the list of Trusted Sites. Reset the Internet Explorer settings can also reset parental control settings. We recommend that you note these sites before you use the reset Internet Explorer settings. Reset Internet Explorer is not reversible, and all the previous settings are lost after reset.

  Also see this article:
  Understanding Windows Firewall settings
  http://Windows.Microsoft.com/en-us/Windows/understanding-firewall-settings#1TC=Windows-7

  Note: Firewall and Antivirus software can help protect your computer against viruses and other security threats. In most cases, you should not turn off your antivirus software and firewalls. If you need to disable temporarily to install other software, you should reactivate as soon as you are finished. If you are connected to the Internet or a network, while your antivirus software and firewall are disabled, your computer is vulnerable to attacks.

  To get help on Google chrome, I suggest you post your question on Google chrome forums.
  http://productforums.Google.com/d/Forum/chrome

  I hope this information helps.

  Please let us know if you need more help.

  Thank you

• Cannot access the API blocked

  I created a web application bb factory using the web works for Visual Studio plugin. I tried to install the application and got the error cannot access the api blocked. I researched and found that the fact of not having signed app can cause this error. I followed the instructions that comes with the plugin on the signing of the app.

  • In Microsoft® Visual Studio®, on the Tools menu, click on install BlackBerry signing key.
  • Navigate to the folder that contains the file signing key (.csi).
  • Click OK.
  • Type the PIN registration and the password for the private key.
  • Click Save.
  • When the success dialog box appears, click on exit.

  When I try to install the application, I get the same error message. Do not install the key and sign the application correctly? Help, please

  Have you installed all the three keys?

• Cannot open programs and files error: windows cannot access the file or the path of the specified unit. you don't have the appropriate permissions to access the item

  Original title: Search programs and files will not let me

  I get no response from the search - when I hit to see more results I request = aa indicating that windows cannot access the file or the path of the specified unit.  you don't have the appropriate permissions to access the item

  Hello

  1. don't you make changes to the computer until the problem occurred?

  2 when was the last time it was working fine?

  3 are you facing this problem only with Web sites or other sites also?

  I suggest you try the steps below and check if it helps

  Step 1:
  Try to start the computer in safe mode with network and check if the same error message, here is the link:

  http://Windows.Microsoft.com/en-us/Windows-Vista/advanced-startup-options-including-safe-mode

  Step 2:
  However, to work around the problem, try the step below:

  a. right click on the program file, select Properties.

  b. on the general tab, at the bottom, you will see listed in the issue of safety: this file came from another computer and might be blocked to help protect this computer.

  c. unlock.

  d. click on apply.
  e. click OK.

  Hope this information is useful.

• VPN IS CONNECTED BUT CANNOT ACCESS THE INTERNAL NETWORK

  I tried to set up a simple customer vpn using this document

  http://www.Cisco.com/en/us/products/sw/secursw/ps2308/products_configuration_example09186a00801e71c0.shtml

  VPN IS CONNECTED BUT CANNOT ACCESS THE INTERNAL NETWORK BEHIND "RA"...

  6.3 (5) PIX version

  interface ethernet0 car

  Auto interface ethernet1

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  activate the encrypted password of VmHKIhnF4Gs5AWk3

  VmHKIhnF4Gs5AWk3 encrypted passwd

  hostname VOIPLABPIX

  domain voicelab.com

  fixup protocol dns-length maximum 512

  fixup protocol ftp 21

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol http 80

  fixup protocol they 389

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol sip 5060

  fixup protocol sip udp 5060

  fixup protocol 2000 skinny

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol tftp 69

  names of

  access-list 101 permit ip 172.10.2.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 101 permit ip 172.10.1.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 102 permit ip 172.10.2.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 102 permit ip 172.10.1.0 255.255.255.0 172.10.3.0 255.255.255.0

  pager lines 24

  Outside 1500 MTU

  Within 1500 MTU

  IP address outside 208.x.x.11 255.255.255.0

  IP address inside 172.10.2.2 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  IP local pool voicelabpool 172.10.3.100 - 172.10.3.254

  history of PDM activate

  ARP timeout 14400

  NAT (inside) - 0 102 access list

  Route outside 0.0.0.0 0.0.0.0 208.x.x.11 1

  Route inside 172.10.1.0 255.255.255.0 172.10.2.1 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  AAA-server GANYMEDE + 3 max-failed-attempts

  AAA-server GANYMEDE + deadtime 10

  RADIUS Protocol RADIUS AAA server

  AAA-server RADIUS 3 max-failed-attempts

  AAA-RADIUS deadtime 10 Server

  AAA-server local LOCAL Protocol

  Enable http server

  http 172.0.0.0 255.0.0.0 inside

  http 0.0.0.0 0.0.0.0 inside

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Permitted connection ipsec sysopt

  Crypto ipsec transform-set esp-aes-256 trmset1, esp-sha-hmac

  Crypto-map dynamic map2 10 set transform-set trmset1

  map map1 10 ipsec-isakmp crypto dynamic map2

  client authentication card crypto LOCAL map1

  map1 outside crypto map interface

  ISAKMP allows outside

  ISAKMP identity address

  part of pre authentication ISAKMP policy 10

  ISAKMP policy 10 encryption aes-256

  ISAKMP policy 10 sha hash

  10 2 ISAKMP policy group

  ISAKMP life duration strategy 10 86400

  vpngroup address voicelabpool pool cuclab

  vpngroup dns 204.x.x.10 Server cuclab

  vpngroup cuclab by default-field voicelab.com

  vpngroup split tunnel 101 cuclab

  vpngroup idle 1800 cuclab-time

  vpngroup password cuclab *.

  Telnet timeout 5

  SSH 208.x.x.11 255.255.255.255 outside

  SSH 0.0.0.0 0.0.0.0 outdoors

  SSH 172.10.1.2 255.255.255.255 inside

  SSH timeout 60

  Console timeout 0

  username labadmin jNEF0yoDIDCsaoVQ encrypted password privilege 2

  Terminal width 80

  Cryptochecksum:b03a349e1ac9e6022432523bbb54504b

  : end

  Try to turn on NAT - T

  PIX (config) #isakmp nat-traversal 20

  http://www.Cisco.com/en/us/products/ps6120/products_tech_note09186a00807e0aca.shtml#Solution1

  HTH

• CANNOT ACCESS THE LAN WITH THE EASY VPN CONFIGURATION

  Hello

  I configured easy vpn server in cisco 1905 SRI using ccp. The router is already configured with zone based firewall. With the help of vpn client I can reach only up to the internal interface of the router, but cannot access the LAN from my company. I need to change any configuration of ZBF since it is configured as "deny everything" from outside to inside? If so that all protocols should I match?   Also is there any exemption of NAT for VPN clients? Please help me! Thanks in advance.

  Please see my full configuration:

  Router #sh run
  Building configuration...

  Current configuration: 8150 bytes
  !
  ! Last modification of the configuration at 05:40:32 UTC Wednesday, July 4, 2012 by
  ! NVRAM config updated 06:04 UTC Tuesday, July 3, 2012 by
  ! NVRAM config updated 06:04 UTC Tuesday, July 3, 2012 by
  version 15.1
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  router host name
  !
  boot-start-marker
  boot-end-marker
  !
  !
  Passwords security min-length 6
  no set record in buffered memory
  enable secret 5 xxxxxxxxxxx
  !
  AAA new-model
  !
  !
  AAA authentication login default local
  AAA authentication login ciscocp_vpn_xauth_ml_1 local
  AAA authorization exec default local
  AAA authorization ciscocp_vpn_group_ml_1 LAN
  !
  !
  !
  !
  !
  AAA - the id of the joint session
  !
  !
  No ipv6 cef
  IP source-route
  no ip free-arps
  IP cef
  !
  Xxxxxxxxx name server IP
  IP server name yyyyyyyyy
  !
  Authenticated MultiLink bundle-name Panel
  !

  parameter-map local urlfpolicy TSQ-URL-FILTER type
  offshore alert
  block-page message "Blocked according to policy"
  parameter-card type urlf-glob FACEBOOK
  model facebook.com
  model *. Facebook.com

  parameter-card type urlf-glob YOUTUBE
  mires of youtube.com
  model *. YouTube.com

  parameter-card type urlf-glob CRICKET
  model espncricinfo.com
  model *. espncricinfo.com

  parameter-card type urlf-glob CRICKET1
  webcric.com model
  model *. webcric.com

  parameter-card type urlf-glob YAHOO
  model *. Yahoo.com
  model yapo

  parameter-card type urlf-glob PERMITTEDSITES
  model *.

  parameter-card type urlf-glob HOTMAIL
  model hotmail.com
  model *. Hotmail.com

  Crypto pki token removal timeout default 0
  !
  Crypto pki trustpoint TP-self-signed-2049533683
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 2049533683
  revocation checking no
  rsakeypair TP-self-signed-2049533683
  !
  Crypto pki trustpoint tti
  crl revocation checking
  !
  Crypto pki trustpoint test_trustpoint_config_created_for_sdm
  name of the object [email protected] / * /
  crl revocation checking
  !
  !
  TP-self-signed-4966226213 crypto pki certificate chain
  certificate self-signed 01
  3082022B 30820194 02111101 300 D 0609 2A 864886 F70D0101 05050030 A0030201
  2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43647274 31312F30
  69666963 32303439 35323236 6174652D 3833301E 170 3132 30363232 30363332

  quit smoking
  encryption pki certificate chain tti
  for the crypto pki certificate chain test_trustpoint_config_created_for_sdm
  license udi pid CISCO1905/K9 sn xxxxxx
  licence start-up module c1900 technology-package datak9
  username privilege 15 password 0 xxxxx xxxxxxx
  !
  redundancy
  !
  !
  !
  !
  !
  type of class-card inspect entire tsq-inspection-traffic game
  dns protocol game
  ftp protocol game
  https protocol game
  match icmp Protocol
  match the imap Protocol
  pop3 Protocol game
  netshow Protocol game
  Protocol shell game
  match Protocol realmedia
  match rtsp Protocol
  smtp Protocol game
  sql-net Protocol game
  streamworks Protocol game
  tftp Protocol game
  vdolive Protocol game
  tcp protocol match
  udp Protocol game
  match Protocol l2tp
  class-card type match - all BLOCKEDSITES urlfilter
  Server-domain urlf-glob FACEBOOK game
  Server-domain urlf-glob YOUTUBE game
  CRICKET urlf-glob-domain of the server match
  game server-domain urlf-glob CRICKET1
  game server-domain urlf-glob HOTMAIL
  class-map type urlfilter match - all PERMITTEDSITES
  Server-domain urlf-glob PERMITTEDSITES match
  inspect the class-map match tsq-insp-traffic type
  corresponds to the class-map tsq-inspection-traffic
  type of class-card inspect correspondence tsq-http
  http protocol game
  type of class-card inspect all match tsq-icmp
  match icmp Protocol
  tcp protocol match
  udp Protocol game
  type of class-card inspect correspondence tsq-invalid-src
  game group-access 100
  type of class-card inspect correspondence tsq-icmp-access
  corresponds to the class-map tsq-icmp
  !
  !
  type of policy-card inspect urlfilter TSQBLOCKEDSITES
  class type urlfilter BLOCKEDSITES
  Journal
  reset
  class type urlfilter PERMITTEDSITES
  allow
  Journal
  type of policy-card inspect SELF - AUX-OUT-policy
  class type inspect tsq-icmp-access
  inspect
  class class by default
  Pass
  policy-card type check IN and OUT - POLICIES
  class type inspect tsq-invalid-src
  Drop newspaper
  class type inspect tsq-http
  inspect
  service-policy urlfilter TSQBLOCKEDSITES
  class type inspect tsq-insp-traffic
  inspect
  class class by default
  drop
  policy-card type check OUT IN-POLICY
  class class by default
  drop
  !
  area inside security
  security of the OUTSIDE area
  source of security OUT-OF-IN zone-pair outside the destination inside
  type of service-strategy check OUT IN-POLICY
  zone-pair IN-to-OUT DOMESTIC destination outside source security
  type of service-strategy inspect IN and OUT - POLICIES
  security of the FREE-to-OUT source destination free outdoors pair box
  type of service-strategy inspect SELF - AUX-OUT-policy
  !
  Crypto ctcp port 10000
  !
  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 2
  Group 2
  !
  ISAKMP crypto client configuration group vpntunnel
  XXXXXXX key
  pool SDM_POOL_1
  include-local-lan
  10 Max-users
  ISAKMP crypto ciscocp-ike-profile-1 profile
  vpntunnel group identity match
  client authentication list ciscocp_vpn_xauth_ml_1
  ISAKMP authorization list ciscocp_vpn_group_ml_1
  client configuration address respond
  virtual-model 1
  !
  !
  Crypto ipsec transform-set TSQ-TRANSFORMATION des-esp esp-md5-hmac
  !
  Profile of crypto ipsec CiscoCP_Profile1
  game of transformation-TRANSFORMATION TSQ
  set of isakmp - profile ciscocp-ike-profile-1
  !
  !
  !
  !
  !
  !
  the Embedded-Service-Engine0/0 interface
  no ip address
  response to IP mask
  IP directed broadcast to the
  Shutdown
  !
  interface GigabitEthernet0/0
  Description LAN INTERFACE-FW-INSIDE
  IP 172.17.0.71 255.255.0.0
  IP nat inside
  IP virtual-reassembly in
  security of the inside members area
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/1
  Description WAN-INTERNET-INTERNET-FW-OUTSIDE
  IP address xxxxxx yyyyyyy
  NAT outside IP
  IP virtual-reassembly in
  security of the OUTSIDE member area
  automatic duplex
  automatic speed
  !
  interface Serial0/0/0
  no ip address
  response to IP mask
  IP directed broadcast to the
  Shutdown
  no fair queue
  2000000 clock frequency
  !
  type of interface virtual-Template1 tunnel
  IP unnumbered GigabitEthernet0/0
  ipv4 ipsec tunnel mode
  Tunnel CiscoCP_Profile1 ipsec protection profile
  !
  local IP SDM_POOL_1 172.17.0.11 pool 172.17.0.20
  IP forward-Protocol ND
  !
  no ip address of the http server
  local IP http authentication
  IP http secure server
  !
  IP nat inside source list 1 interface GigabitEthernet0/1 overload
  IP route 0.0.0.0 0.0.0.0 yyyyyyyyy
  IP route 192.168.1.0 255.255.255.0 172.17.0.6
  IP route 192.168.4.0 255.255.255.0 172.17.0.6
  !
  access-list 1 permit 172.17.0.0 0.0.255.255
  access-list 100 permit ip 255.255.255.255 host everything
  access-list 100 permit ip 127.0.0.0 0.255.255.255 everything
  access-list 100 permit ip yyyyyy yyyyyy everything
  !
  !
  !
  !
  !
  !
  !
  !
  control plan
  !
  !
  !
  Line con 0
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport of entry all
  output transport lat pad rlogin lapb - your MOP v120 udptn ssh telnet
  StopBits 1
  line vty 0 4
  transport input ssh rlogin
  !
  Scheduler allocate 20000 1000
  end

  A few things to change:

  (1) pool of IP must be a single subnet, it is not the same subnet as your subnet internal.

  (2) your NAT ACL 1 must be changed to ACL extended for you can configure NAT exemption, so if your pool is reconfigured to be 10.10.10.0/24:

  access-list 120 deny ip 172.17.0.0 0.0.255.255 10.10.10.0 0.0.0.255

  access-list 120 allow ip 172.17.0.0 0.0.255.255 everything

  overload of IP nat inside source list 120 interface GigabitEthernet0/1

  No inside source list 1 interface GigabitEthernet0/1 ip nat overload

  (3) OUT POLICY need to include VPN traffic:

  access-list 121 allow ip 10.10.10.0 0.0.0.255 172.17.0.0 0.0.255.255

  type of class-card inspect correspondence vpn-access

  game group-access 121

  policy-card type check OUT IN-POLICY

  vpn-access class

  inspect