Network Security

I have an access-list that was named "extended" (without quotation marks) and the ASA will not let me remove it.I have tried everything I know to try and get it out, but I cannot remove a single line.ASA(config)# no access-list extended line 1 extend...

Cisco ASA 5510 ASA 8.0(4) ASDM 6.1(5), with inside, outside, and DMZ interfaces.  An inside host is dynamically NATted to the outside to browse.  I've added an inside router with 2 ethernet interaces, to work with subnetting the inside network.  A ho...

Hi, on a Mac computer I am trying to connect from the datacenter to an external server using different SFTP applications and getting different errors e.g. connection reset by peer, connection reset, etc. It does work randomly with some PCs. The conne...

Hello,I just replaced a PIX firewall with Cisco ASA firewall and for some reason, one part of the access is not working which was working on PIX firewall. Access to dmz8 from outside (internet) is not working for a public IP network on dmz8. I also s...

Hi,I've noticed something when having some traffic inspected.Imagine you have a zone A and a zone B and a policy allowing all connection from A to B:class-map type inspect match-any cm_all match protocol icmp match protocol tcp match protocol udppoli...

Hello,On an ASA 5520 active, standby pair, what will result if the failover link or interface goes down or fails. Will both devices become active?If yes, how to prevent this. We want it in such a way that if such a situation happens, there should be ...

I am unable to ssh to the cisco firewall from outside. Though when i telnet on port 22, i do get a reply Please see below.Below is my configaaa authentication ssh console LOCALssh 0.0.0.0 0.0.0.0 insidessh 0.0.0.0 0.0.0.0 outsidessh timeout 5console ...

Hello,I have 2 x 5510's in ative/standby mode, things look fine until the active one needs to be failed over and I realise the standby oneis dead.  I never notice as the lights on the ASA look good, I only nice as I can't telnet or console onto it, h...

I just added a PIX515E to my lab (since this is a lab, if I need to change IP address, that is not a problem)....I thought I configured it right, but I am not able to ping any of my other routers/PCs.I have EIGRP on the other three routers, but not s...

Hi All,we have three sites at mumbai, pune , delhi.A site to site tunnel  is created between mumbai and pune.and tunnel between mumbai and delhi.We donot have tunnel between delhi and pune.Is it possible to route the traffic of delhi from mumbai site...

HiI have lan range 10.x.x.x/24 Now I have natted with public ip.In the site to site vpn how can i use for interseting trafficcan anyone guide me with an example

I have two sites where I am experiencing NAC Agent issues.The first site is a OOB VGW with CASs installed at the site and the CAMs are at another site.  Web authentication works fine and ports are changed as they should be, but agent never works.The ...

Hi,I'm trying to configure the NAC Profiler with a 3310 CAS Collector. In the "Edit Collector" menú, it shows all the modules as "Running", except for the NetWatch module which shows a state "Invalid configuration file (missing InternalAddress)".I co...

Hi guys,I have an ASA 5510 that I want to connect to 2 isp (one of my private network uses the isp1, and all others the isp2). Excluding the 5510 does not accept PBR(policy based routing), i saw that you could put a router, like cisco 2811 in front o...