Hican anyone in simple term tell me what is the difference between access-list extended 123 permit host 1.1.1.1 eq host 25 2.2.2.2andaccess-list extended 123 permit host 1.1.1.1 host 2.2.2.2 eq 25can we use this in both firewalls and IOS ?
Hello!Please, could you help me? Is it possible to install ISE on Catalyst 2950? In Component Compatibility Guide http://www.cisco.com/en/US/docs/security/ise/1.0.4/compatibility/ise104_sdt.htmlCatalyst 2950 only support 802.1X and VLAN.At first I ne...
Hi Seniors,I have one cisco 881-K9 router and IOS version loaded there is 15.0.I set up the IPSec VPN on that router and configure the firewall by using CCP guru.My boss ask me whether can set up URL filtering and Intrusion Prevention on that router....
Hello All,I want to know if there is a way to capture (logging level?) port-description information on Cisco devices (i.e. 4510, 2960, etc.) as it sends traps to a syslog server.For example, the IP of of my 4510 is 10.1.150.5, I have global snmp (RO)...
Can anyone confirm what the difference between the device "up time" and the "failover cluster" uptime is as per the "show ver" output below? i've just installed a new cluster using 2 new ASA and received the below outputs.asa-firewall> sh verCisco Ad...
Hi all,Since several weeks ago we are triyng to solve a disconnection problem related to servers benind an ASA 5520behind this ASA there are: -subnet with public ip addres-sunbet with prive ip address, the server on this subnet are acccesible via NA...
Hey all,I have a server on my LAN that initialises a VPN to another box on the Internet which has a public IP address. For some reason, when the tunnel is established using TCP everything works but when using UDP (port 5000) it fails. The connection ...
I have an ASA 5505 with a tunnel to a third party network. The tunnel connection comes up fine but I can't get the NAT to work. They are requiring that I send them a specific IP address as the source IP. Here are the specifics:Source Network: 10.10.1...
Hello,I have a high value for Global Correlation parameter, which I generated my ips module is alarmed, how I can reset this value? Additionally, the automatical updates does not work properly in the module. What could be the problem?Thanks for you h...
Hello,I'm trying to get DHCP relaying working across a site-to-site VPN between two ASAs.I found the article, here https://supportforums.cisco.com/community/netpro/security/firewall/blog/2011/01/07/asa-pix-dhcp-relay-through-vpn-tunnel a huge help a...
Hi AllMy setup..Site 1: Cisco ASA 5505 Firewall running 8.4.1Site 2: Cisco 877 RouterBetween the 2 of these I have a working site to site VPN setup. The only issue is if a NAT rule is set up on the remote office, to access that I have to use to the e...
I have the following Pix 515E Firewall, that has been working good for a few years. But suddenly, the Pix stop booting up. The only thing that is happening is the power and network traffic led flashes and the active led is off.So my question is tha...
Hi Experts,I have some servers in my inside network. all of them having public IPs. Do i need to NAT these Public IPs with the same Public IPs???orCan i use NO NAT for these servers and permitt all traffic from outside to these servers?or Is there an...
I've never seen it in black and white, but my interpretation of "inspection" of traffic through a firewall is the concept of flows being continuously examined for statefulness. I suppose I need to define my understanding of statefulness as the maint...
Hi Experts,I have a PIX515E. I need to create a vpn to my clients office. PIX is alerady having two VPN, among two one is a dynamic VPN to a dynamic IP of netgear router.I tried to create a new IPSEC vpn to a gateway loadbalancer.Device is PLANET MH2...
