Network Security

We have a new ASA 5545 with multiple internal VLANs.  After much reading, I am more confused than ever regarding the new NAT.  Could somebody please help with this simple example w/ several internal VLANs?  I would like to setup acl's to filter conne...

I have an old Cisco PIX-515E, 128 MB RAM for my test environment.I have update the Pix to "Cisco PIX Security Appliance Software Version 8.0(4)3"But now i need the ASDM image file. Can somebody send me these file? Hardware:   PIX-515E, 128 MB RAM, CP...

Two ISP link Terminated, 1 on ASA 5510 and 1 on cisco Router 2801, need to achieve failover between two ISP. need possible ways .if Router Links goes down then Firewall link should takeover.two different group of user , 1 group having gateway of rout...

Dear Friends,There is a IPS 4260 that reports the status LED to red. When reading the hardware installation guide, i came to know that this indicates a POST failure. I forced a POST again of the IPS by rebooting the IPS but i could not capture any si...

Im having troubles to access share over vpn.When the source is the vpnclient(11.11.7.0/24) and i try access the share in server 11.11.18.2, dont works.But the inverse works, if i create the share on vpn client (11.11.7.0/24), and try access this with...

We have recently purchased some firewalls for a new environment that we configured to use in FIPS mode.  Because the firewalls are in FIPS mode, the only RADIUS authentication protocol they can use is CHAP/SHA-1.  We originally were having issues aut...

Hi,I got one problem in ACS report. I create the one favourites report. Then i insert 24415 User authentication against Active Directory failed since user account is locked out in Failure reason. then I click on edit favourites. After than i check ag...

Support Community, I've been trying to set up the following commands in my ASA5515 running ver. 9.125 for Duplicat TCP SYN Flood attacks. So I put in the default values that you find in the Cisco documentation but this didnt work for me to well. It s...

Hi All,I want to backup all the radius logs before upgrading of the ISE from 1.0.4 to 1.1.0. I have already took a back up of application data. From Gui under Monitoring Node-->full backup on demand1)Is that all for the radius logs?2)If I have upgrad...

Hi Folks,Working on deploying ACS 5.5 in a multi-site (5+) environment.  With groups going away, what is the best way to allow location based access?.  So far, I have the following - but it seems way overcomplicated. Each device is assigned a locatio...

Hi,after I put the right Username and Password in the first mask, immediately the second mask (below) appear...It seems the Cisco ASA 5505 is refusing my username or password without saying me anything!And I'm going to repeat mysef... the userneme an...

Hello, I have a Cisco 2921 in the network acting as a VPN server for remote access using Cisco VPN Client for employees. I have couple of questions on that. How do I find out how many users are allowed to access the VPN with current license?If I want...

Hello all, I have an asa and a web server behind it. I am able to connect to the webserver via http, however https does not work properly. Google chrome says it is "Waiting for proxy tunnel" and will not connect. I have exceptions in the ACL for http...

Hi all.I'm not new to firewall config but acutally is the first time I need to configure a PPPoE on a Cisco ASA.IP and def-route will be received via DHCP but I already know which IP will be assigned. I will have only 1 IP public IP address.The netwo...

Hi all,My customer is facing with the above error. He has done the following: Primary ASA showed Memory allocation Errors in the logs, in fact saving config was not possibleafter removing Basic Threat Detection config and adding it again saving confi...