Network Security

ASA 55x0 error connecting to AAA (ACS 5.2)Hi, we encountered a problem between     CISCO ASA 5510     CISCO ACS 5.2If I have a downloadable ACL more long/deep of 68 lines for the user defined inside Identity Manager, it keep in error.ASA live log say...

I have configured  remote access vpn in asa 5505 when i tray to connect remotely i am getting this errorSecure VPN connection terminated locally by the Client. Reason 412: The remote peer is no longer responding" i have attached configuration documen...

Hi,i have cisco ASA5520 and i have a remote access vpn .I want to configure logging for this remote access vpn.i want the time user connected .how log it is connected .If any error while connecting ?Please reply ASAP.Regards,Prashant

Hi all,I need to upgrade the fwsm image from 3.1(10) to 4.0(8). Can i do it directly from 3.1(10) to 4.0(8) ?Do i need to upgrade other image also along with Firewall version 4.0(8)?FWSM# sh verFWSM Firewall Version 3.1(10)Device Manager Version 6.1(...

Hi All,Can somebody explain me, how to block SSH tunnels on port 80? Is there any way to achive this.I tried strict http inspection, does not work. Websense doesn' t work - since discover only http headers.  RegardsRafa

Hi Team,we are observing the no. of conn thru asa 5580 is getting increased and one a fine day it will stop sending/receiving traffics.firewall# show conn count1900000 in use, 2000008 most usedAs per the datasheet of this asa, the max conns permissib...

Hi Netpro Team,Im looking forward to know more about how the traffic is going thru a firewall in an ipsec site to site vpn. I also would like to know "what are the field getting added in each step of the data formation though out this process".regard...

Could ASA do this NAT ?src: 192.168.1.1 des: 1.1.1.1 -> src: 2.2.2.2 des 3.3.3.3I assume that 192.168.1.1 is a host in the internal network and it has public internet access ip 1.1.1.1.ASA  has outside ip 1.1.1.1 and inside ip 192.168.1.254 (default-...

Dear all,I faceing a a problem with my nac and nam server i try to deploy OOB Virtual geatway. Both are connect each other and on NAM-- Device Management>> CCA Servers  > connected as the attachment..My nas server ip : 200.200.201.2My nam server ip :...

Hello Team,Could you please let me know if it is possible to provision 3 different public IP addresses to the same DMZ IP (Web server) on an ASA running ver 8.2(4)? Unfortunately, the way the server was provisioned Static or Dynamic PAT will not work...

I have been asked to set up remote access VPN on an ASA 5505 that I previously had no invlovement with.  I have set it up the VPN using the wizard, they way I normally do, but the clients have no access to anything in the inside subnet, not even the ...

HiHas anybody seen the same? The ASA creates RRI routes even for deny statements of the crypto map ACL. So if you have a s2s VPN tunnel and you want some traffic not to be sent over the tunnel you make deny statements within the crypto map ACL. But t...