Network Security

Hello,i learned today the IPS-NME-K9 modules for the 29er routers are EoL. We are using a bunch of them on our edge router facing to our mpls backbone. We were told to use the IOS based IPS solution. I believe the performace will not be the same as w...

Hi Using CCP (Cisco Configuration Professional) could anyone advise if there is a way to tur off the firewall so all traffic from the internet is passed through to VLAN1 as I have a hareware firewall plugged into my router between it and the internet...

Hi all, I've just upgraded my ASA 5510 to 8.4.x and I can't NAT on outside interface anymore.I can't understand when Packet-tracer say me "implicit rule".This is an example of my config:object network Zabbix nat (Lan,Esterna) static interface service...

Hi.I've an ASA5505 running 8.4 firmwareI'm trying to configure access to an internal FTP server using the same IP address we have in the outside interface.The configuration is as follows:---------object network FTP host 192.168.125.32object network F...

                   Hello,Does any one know why our CSC 20 (in an ASA5520) shows "Expires NULL" when we try to check the user/Plus license?These should default to a user count of 500 on the CSC 20 (the CSC 10 defaults to a user count of 50). the licen...

Hi guys,I am currently managing two ASA5550 that are running a quite outdated (14-Dec-10) System image file (asa824-k8.bin). These firewalls are working in Active/Standby mode.I'd like to update their System Image to their newest release, but I canno...

Hello guys,I would like to use eap-chaining for my ISE deployment so host and user name can be send, chained and authenticated so i only allow full access to corporate devices and users. The thing is i am not using EAP-TLS, no user certificate... Eap...

Hi all,I recently turned on on the 'stateful' feature on our Internet ASA's. It was once disabled completely due to an Asymmetric routing issue that existed within our network. I have managed to turn this back on for all but the subnets that require ...

Hi Is there a way to configure my asa5505 to dent all traffic on the inside so i can specify what ip or host  can access specific protocol or ports via access list? im thinking mabe i ned to set the inside security level to 0 also and then specify an...

We have an ASA 5555 that has an ftp server behind the DMZ interface.  Our security policy restricts access to this ftp server to only authorized users/sites.  We have a user who needs access to this ftp server and their ISP will not assign them a sta...

Every time I add a tunnel-group for the Cisco VPN client, my L2L VPN's stop working.  Below is my currently working config.  Would someone mind posting the commands I need to add to enable the Cisco VPN client to connect while allowing all current co...