Network Security

Hi All,I want to use Cisco any connect software and have IPSEC VPN tunnel. As far as i see, now a days i need to update to IKE v 2 with IOS above 8.4. My query is - After update the IOS can i use :i) Cisco any connect VPN client softwaer to have IPSE...

Trying to upgrade to ASA 9....We have a few remote easy vpn ASA 5505 that connect but I am unable to ping the remote LAN.  How can I exempt these networks from what I have here.....(What I currently have for the 5505s - not working)nat (inside,outsid...

Hi there,I have a Cisco ASA 5505 in my home office which has a few PCs behind it with a linux web server running some websites. I can access the websites from outside no problem (i.e. on my iPhone using a 3G connection). However, I struggle to access...

Hi Everyone,Need to confirm if we need to check the CPU utilization of whole ASA which is in context mode------- is commandsh cpu usage context all ---this command shows us cpu usage of all the contexts in the box.As we know that in context mode all ...

Hi Everyone,Say we have two ASA  config in active and standby.Hostname is ASA and say ASA1 is active and ASA2 is standby.IF we make ASA2 as active and reload it then ASA2 should become standby as we have already active ASA1.Need to confirm  if i am c...

Hi Everyone,On ASA  Active/Standby mode  i know thatsay inside or any other interface of active and standby ASA should connect to same switch and vlan.When we assign say ip address to inside interface of both ASA likeip address 192.168.x.1 255.255.25...

hi all,since i'm new to asa...  and my current network don't have acl in between router 3750x and switch 2960s.  if i put security 100 on both dmz and inside network, do i still need ACL in between them?  i basically want for now everything working a...

Hi !Can somebody tell me why I cannot have a Site-to-Site VPN with a Remote Access VPN simultaneously connected or working ??? is in 2 ASAs 5520 8.4(2)Is it necessary any command or instruction that I don't know yet, because I am a little novice.Than...

I'm porting our configuration from a Pix 515 firewall to an ASA 5512x.  What's vexing me right now is with the deprication of the "static" command, I can't quite figure out the best way to Identity NAT my inside subnets (multiple) to the DMZ subnetSo...

I was asked to block pings from the internet to the outside interface of our ASA-5505 firewall.  I found a post that said to enter "icmp deny any outside", however that does not do it.I created an ACL to try and do the trick, also to no avail:access-...