Network Security

Hi, I was reading about anycconnect, and i have one doubt, Do i need Cisco AnyConnect Mobile License if i will establish a vpn with a windows desktop to the ASA using the anyconnect client?.or those licenses are only needed when i use anyconnect on m...

can someone please take a look at this and assist me ..            106001: Inbound TCP connection denied from 172.32.1.101/49171 to 192.168.0.6/3128 flags SYN  on interface outside305005: No translation group found for tcp src outside:172.32.1.101/49...

Consistently I see similar errors like this in my logs. The src address is actually my SCCM server (policy server) and the dst address is a remote VPN user who connects with the AnyConnect client.%ASA-4-419002: Duplicate TCP SYN from inside:10.2.152....

Hi All,A customer want to replace his old Microsoft ISA firewall with another device.I thought of a redundant Cisco ASA pair. The new firewall has to meet the following requirement:The new Firewall has to validate SSL client-certificates against Micr...

Hi I previously had a NEXXT Acrux 300 wireless router and with this device I could configure a specific  ip address to be given a host based on its mac address and then i was able to configure a specific amount of bandwith limit  in KB to that ip add...

Hi all,I am really getting confused and have read lots of article and still don't fully get the queues on asa.I know asa can support standard priority and hierarchical but here is what i don't understandwhy can I not police priority queue? for instan...

HelloNetwork topopogy in our organization is a followingAll server connect to Cisco 3845 main router. All servers have unical ip address from different subnets.We  wish configure Cisco 2901 router as IPS and connect to Cisco 3845.Please say how can w...

I noticed what appears to be a bug with Access-Lists when using Static Port Translations.  Below are the steps to recreate.  Was wondering if anyone else has experienced this, or had an idea what was going on.  If not, I'll use the forums feature to ...

Hello,I Have a problem here.Some times the connection from one ip "out of the firewall" to an ip behind a firewall stops, when it occurs, i send the commands "clear conn origin ip address" and clear xlate "origin ip address", after that, the communic...

Hi All,I have cisco asa 5520 with IPS module ssm 20I want to create a custom-signature in moduleAny document which can help me

I am trying to have my IPS (7.2) access my ASA 9.1.2.  I am getting an error.  I haven't been able to find the exact problem nor any solutions.ASA configssh timeout 5ssh version 2ssh key-exchange group dh-group14-sha1ASA debugDevice ssh opened succes...