Network Security

Hi,I've noticed something when having some traffic inspected.Imagine you have a zone A and a zone B and a policy allowing all connection from A to B:class-map type inspect match-any cm_all match protocol icmp match protocol tcp match protocol udppoli...

Hello,On an ASA 5520 active, standby pair, what will result if the failover link or interface goes down or fails. Will both devices become active?If yes, how to prevent this. We want it in such a way that if such a situation happens, there should be ...

I am unable to ssh to the cisco firewall from outside. Though when i telnet on port 22, i do get a reply Please see below.Below is my configaaa authentication ssh console LOCALssh 0.0.0.0 0.0.0.0 insidessh 0.0.0.0 0.0.0.0 outsidessh timeout 5console ...

Hello,I have 2 x 5510's in ative/standby mode, things look fine until the active one needs to be failed over and I realise the standby oneis dead.  I never notice as the lights on the ASA look good, I only nice as I can't telnet or console onto it, h...

I just added a PIX515E to my lab (since this is a lab, if I need to change IP address, that is not a problem)....I thought I configured it right, but I am not able to ping any of my other routers/PCs.I have EIGRP on the other three routers, but not s...

Hi All,we have three sites at mumbai, pune , delhi.A site to site tunnel  is created between mumbai and pune.and tunnel between mumbai and delhi.We donot have tunnel between delhi and pune.Is it possible to route the traffic of delhi from mumbai site...

HiI have lan range 10.x.x.x/24 Now I have natted with public ip.In the site to site vpn how can i use for interseting trafficcan anyone guide me with an example

I have two sites where I am experiencing NAC Agent issues.The first site is a OOB VGW with CASs installed at the site and the CAMs are at another site.  Web authentication works fine and ports are changed as they should be, but agent never works.The ...

Hi,I'm trying to configure the NAC Profiler with a 3310 CAS Collector. In the "Edit Collector" menú, it shows all the modules as "Running", except for the NetWatch module which shows a state "Invalid configuration file (missing InternalAddress)".I co...

Hi guys,I have an ASA 5510 that I want to connect to 2 isp (one of my private network uses the isp1, and all others the isp2). Excluding the 5510 does not accept PBR(policy based routing), i saw that you could put a router, like cisco 2811 in front o...

Helo all,I have allways configured and run LDAP Server Groups authenticating to Active Directory Domain Controllers using LDAP, never an issue, until I hit a Domain Controller running on a Windows Server 2008. I have been unable to authenticate with ...

Dear Expert,now i have some issue that i use portforwarding from outside to inside and DMZ to inside.now i have lap first from ASA e0/0 to PC1 (outside) and PC2 eth0/1 (inside) and PC3 eth0//2 (DMZ)from inside can ping to outside but outside cannot a...

All:I noticed that NBAR doesn't seem to have a built in method module to identify Spotify traffic.  I'm wondering if anyone has used NBAR to track traffic of this type and if so, can post some configurations about how you did that?Thanks!

Hi, I have recently completed a vulnerability assessment against IPS modules in an ASA  and have had a few vulnerabilities flag up. The Vulnerabilities are surrounding the Linux OS that the IPS sits on. Does anyone know if the OpenSSH can be upgraded...