Network Security

Hi all, I wanted as part of an IOS update on access switches (3560, etc.), by changing from IPBASE to IPSERVICEK9. It should be set equal to SSH. It is intended to grant no username, password authentication-more. But solely on the public and private...

Hi,New to CSC module, just a have a few question.1. By default if host or subnet is not on the access-list that is tied to the policy what happens? Does it get dropped?2. On per interface service policy access-list inside-csc tied to inside interface...

Dear Guys,Based on https://supportforums.cisco.com/docs/DOC-12690Cisco changes their paradigm in ACL and NAT configuration. They use "REAL-IP" address in ACL configuration.My question is why they changes their paradigm, Based on Tochukwu Iwuora answe...

Hi,I am able to ping from Switch to firewall inside ip and user desktop ip but unable to ping from user desktop to  FW Inside ip..pls suggest config is below for both switch and FW Cisco ASA5510....TechCore-SW#ping 172.22.15.10Type escape sequence to...

I need helping configuring RDP access to my local server from a remote location on my Cisco ASA 5505 Firewall.I have attempted to configure rdp access but it does not seem to be working for me Could I please ask someone to help me modify my current c...

Hi peopleI am planning to sell my 26xxXM routers and get something better to run IOS 15x for new CCIEI am wondering if someone can sagest me router that will be good to use as Zone Based Firewall .I am thinking of 1841 with min 256 Dram, that should ...

Hello All,I working on a security solution using ASA firewall and need some technical advice on ASA. Is it possible to setup a IPSec tunnels  on each subinterface of a physical interface on ASA 5510? I would be greatul if someone please reply post th...

Hello,We have an ASA 5520 and it's inside interface is currently plugged into a fast ethernet port on a 3750.  I have just bought a 1gig SFP module and have copied the fast ethernet port config to the gigabit port, but the port seems to be flapping, ...

                   HiI have FWSM failover pair, Active/Active configuration, admin and another 4 context, few context active on first FWSM, other on second FWSM.I needed to add  VLANs 51 and 52 to FWSMI created VLANs on both Cat6500, created firewall...

M question is would it cause my problems if I had the outside interface external ip mapped to vlan2 with the same ip address as I am trying to create static route to my server? Or is this OK? Keep in mind these are imaginary ips.I was trying to use t...

HiIn ASA 8.0,I have following queries related to redundant interfacesa)While configuring redundant interface can the redundant interface again be divided into logical interface like red1.1 , red1.2 ?b)Is Redundant interface supported in the Multiple ...

Hi All,We have a wifi network for guests, that we route to internet through an old PIX515 Firewall. We recently tuned the timers to lower values in order to "save" on resources and publix address usage.The timers we use are:timeout xlate 0:30:00timeo...

Helloi have to setup two ASA 5520 Active/Active with multiple security context.i need to configure tracking by sla monitor command.is there any restriction exit , if so , is there any workaroundregards,mibrahim