Network Security

Hello,I have 2 x 5510's in ative/standby mode, things look fine until the active one needs to be failed over and I realise the standby oneis dead.  I never notice as the lights on the ASA look good, I only nice as I can't telnet or console onto it, h...

I just added a PIX515E to my lab (since this is a lab, if I need to change IP address, that is not a problem)....I thought I configured it right, but I am not able to ping any of my other routers/PCs.I have EIGRP on the other three routers, but not s...

Hi All,we have three sites at mumbai, pune , delhi.A site to site tunnel  is created between mumbai and pune.and tunnel between mumbai and delhi.We donot have tunnel between delhi and pune.Is it possible to route the traffic of delhi from mumbai site...

HiI have lan range 10.x.x.x/24 Now I have natted with public ip.In the site to site vpn how can i use for interseting trafficcan anyone guide me with an example

I have two sites where I am experiencing NAC Agent issues.The first site is a OOB VGW with CASs installed at the site and the CAMs are at another site.  Web authentication works fine and ports are changed as they should be, but agent never works.The ...

Hi,I'm trying to configure the NAC Profiler with a 3310 CAS Collector. In the "Edit Collector" menú, it shows all the modules as "Running", except for the NetWatch module which shows a state "Invalid configuration file (missing InternalAddress)".I co...

Hi guys,I have an ASA 5510 that I want to connect to 2 isp (one of my private network uses the isp1, and all others the isp2). Excluding the 5510 does not accept PBR(policy based routing), i saw that you could put a router, like cisco 2811 in front o...

Helo all,I have allways configured and run LDAP Server Groups authenticating to Active Directory Domain Controllers using LDAP, never an issue, until I hit a Domain Controller running on a Windows Server 2008. I have been unable to authenticate with ...

Dear Expert,now i have some issue that i use portforwarding from outside to inside and DMZ to inside.now i have lap first from ASA e0/0 to PC1 (outside) and PC2 eth0/1 (inside) and PC3 eth0//2 (DMZ)from inside can ping to outside but outside cannot a...

All:I noticed that NBAR doesn't seem to have a built in method module to identify Spotify traffic.  I'm wondering if anyone has used NBAR to track traffic of this type and if so, can post some configurations about how you did that?Thanks!

Hi, I have recently completed a vulnerability assessment against IPS modules in an ASA  and have had a few vulnerabilities flag up. The Vulnerabilities are surrounding the Linux OS that the IPS sits on. Does anyone know if the OpenSSH can be upgraded...

Hey folks,Can someone please share ideas and experiences if it is possible to send commands to ASA firewall using expect scripting from a Linux box. I found a few references on Internet but guys say that ASA has always been different from IOS and it ...

Hi,We have network management server. I have configured SNMP on our Cisco ASA 5520 device accordingly. My network management server can view the Firewall and i have also added the device in the server list. But i cannot see the interface through the ...

Not  abe to upgrade the IOS image PIx7.0  from earlier version 6.3   in  to my old Pix-525 FO(Secondary unit) license box .Is it possible to upgrade without Primary unit (Unrestricted License)  ?