Network Security

I recently discovered that a number of our remote sites could not connect to each other via dmvpn due to various certificate problems.They could all connect to our hubs due to pre shared keys, so the problem was never discovered before a colleague di...

Hi We currently have some ASA5510's running 8.2 and are planning to migrate to ASA5525's running 9.1 but have an issue when trying to upgrade the configuration in that it appears some routes we had are no longer supported so do not come over after th...

Dear all, I’ve configured 2 ASA 5550 active / standby (both with SFP module), they work very well when both of them are connected but as soon as I switch off one of them (to test the failover) then the running one tells me “ can’t find mate “ which i...

We have 2 ASA 5525X V9.1.2 in active/passive failover mode; they are managed via their M0/0 interfaceIs there a way to avoid that primary and secondary ASAs exchange their own IP addresses at time of failover ?the objective is to allow each ASA to be...

Above is the command ip nat pool no  overload prefix 22 Does anyone know what the prefix 22 does and why it is added.  I also and new at learning and currently studying and wanted to know any recommendations for taking the CCNA or CCNP and what onlin...

I have a situation were we require asymmetrical routing. I have turned on TCP-State-Bypass and if I do a show conn I can see the connection with a B flagTCP OUTSIDE 10.10.20.15:1157 INSIDE 192.168.135.15:80, idle 0:00:12, bytes 564, flags UIOBHowever...

HelloI'm trying to implement identity firewall through ldap vpn authenticantion for machine which is not joined to the domain. I found that when I authenticate by vpn there are no logon event on DC (the username\password given at connection was only ...

4Oct 17 201408:25:02450001199.255.120.168 Deny traffic for protocol 17 src inside:192.168.3.18/5077 dst outside:199.255.120.168/5090, licensed host limit of 10 exceeded. Can anyone give me some hints how my ASA5505 suddenly starts to deny traffic due...

I need to forward UDP port 3290 from the outside of my network to any host on the inside interface.The application is a primitive voice protocol, whereby the client communicates to the server via TCP which port should be used for UDP communication.  ...

Hi, Does anyone know a workaround to this limitation? (other than the "management-access" command for VPN connections) Management access to an interface other than the one from which you entered the ASA is not supported. For example, if your manageme...

Hi team, I am using Cisco ACE appliance (c4710ace-t1k9-mz.A5_2_2.bin) to offload SSL connection for one of our customer. i have perform the steps given on link https://tools.cisco.com/bugsearch/bug/CSCur27691 but still able to browse the webpage usin...