Network Security

HiI configurate ASA's in active active mode. I create 10 context's in Primary ASA. 5 context are in group1 in ASA1 and 5 conetexts are in group2 in ASA2.The problem assign ip address to outside interface of context's.I use int gi0/0 and gi0/1 for out...

Hi allWe are currently using ACS for wireless authentication. Guests register over an external Sharepoint webpage. The REST API is used to create and later delete these temporary users in ACS.Now we want to migrate to ISE. In contrast to ACS, the ISE...

Having a problem with an ASA5520 system in that Backup and Restore configuration option under the ASDM Tools menu is not displayed/available.  Any ideas as to why this is?  ASDM version supports it as far as I can see.  Further details:- ASDM/ASA ver...

Hello,I am trying to setup IPv6 tunnel to tunnel-broker Hurrican Electrics. IPv6 connection is working OK only if I disable zone security on WAN interface (Fe0 - IPv4 interface).Which protocols must be alloved to and from router?IOS version: 15.1.2T1...

Does the IPS prevent viruses? So we do not require anti-virus on endpoints?ThanksHilary

HelloWe are currently running ASA9.0(3)ED on our firewalls.  This is the latest release in the 9.0 train on the downloads page, dated 22/07/2013The bug above is in the latest set of advisories released 13/10/2013http://tools.cisco.com/security/center...

I have been getting overrun errors on 3 different ASA 5550 HA pairs with traffic rates less than 100Mbps total.  I was told by one TAC guy to split the traffic between the two slots so that traffic comes in one and exits the other to maximize through...

Does anyone know if it is possible to use Cisco ACS version 5 to provide identity service for ASAs identity fw?             

I just recently tried to upgrade the code version of a 5510 from 8.3(2) to 9.1 and got this error: This is an ASA image and cannot be loaded on a PIX platform.I was consoled into the firewall and watching it boot up, after that error it just said "re...

Hello,We currently have an ASA 5510 as our edge firewall that is connected on e0/1 to our core switch, a 4510R+E. The connection from the ASA is to an access port (vlan 99) on the 4510. I would like to migrate this configuration to subinterfaces on t...

Hello,I have two ASA firewalls configured in failover. I was trying to install software CX module on both. However, on secondary ASA its giving problem and not showing up in the "show module cx detail". I am attaching the output of same command on bo...

I have a tunnel created and I need to NAT the local network 192.168.1.0/24 to 172.31.196.0/24 to the destination IP, let's say (2.2.2.2)code version is 821name 2.2.2.2 External_IPname 172.31.196.0 Local_xlatedI thought the statement would look like ...