Network Security

Hi,As I am trying to create site to site VPN.The other side they have given me parameters.Phase 2 parameter is esp-3des esp-sha-hmac.SIM IP subnet is 10.85.170.0/23 and VPN gateway is 41.220.75.1IKE Encryption (Phase 1): 3DESIKE Hash (Phase 1): SHA1I...

Hi all,i've been using a the classmap "class-map type inspect match-any min-cls-insp-in-out"  in a policymap "policy-map type inspect min-pm-in-out" in the zone security "ccp-zp-in-out source" for my firewall. I've just noticed a "match protocol Othe...

I'm attempting to configure two ASA 5520 for active/standby failover.When I enter the “failover” command to enable the config on the primary ASA, the entire routing table disappears.There is no routing process running, only static routes are configur...

Hi Expertsi have ASA 5520 , some times the CPU Spikes above 90% for 5 Seconds then it went down to 35 - 40% ,but what happened when it shoots to 90% all connection go through this ASA gets drops then i receive complain since application traffic trave...

Hi ,                   Edited the "sshd_config" file to support only for the SSH version 2 and killed the session using "kill -HUP pid". But still SSH version 1 is working.Also confirmed the the sshd_config file saved properly (protocol 2). Please he...

Hello,I need verification that all I need to do something like this:http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtmlIs a smartnet contract to be able to access the software to update the ASA 5...

Hi, we have users connecting via an ISP Wan-link to our ASA with inside-subnet 192.168.1.0. The remote users are on 192.168.2.0 and can only access 192.168.1.1, no other IP on the 192.168.1.0 subnet. Any idea why?The (ISP) router and 192.168.2.0-subn...

Hi does anyone know about the order in which the nat rules are displayed when doing a show run. Is this configurable? What I mean is when I do a show run using 8.43 I see the 8.4 version of dynamic policy nat rules listed first, then static nat rules...

Hi All,Simple problem i have setup a NAT Rule as followsstatic (Inside,Outside) tcp WEB_REMOTE_ACCESS_EXT 2081 JENKINS https netmask 255.255.255.255 It wont let me use port 2081 to get to that server if i change it to 443 it works fine. I have tried ...

I upgraded a pair of ASA 5520s from ASA 8.3 to ASA 8.4(4) this week and now my DMZ hosts cannot reliably communicate with eachother. I have a DMZ network of 10.20.20.16/28 configured. 10.20.20.17 is the ASA/Gateway and 10.20.20.19 is one host and 10....