Network Security

Hello,We have a Cisco ASA 8.3 and we're trying to configure NAT with multiple types of NAT.We have a static NAT to an inside host from 1.1.1.2.Internet Interface is on 1.1.1.3.Users get NAT (PAT) on 1.1.1.4VPN Subnet "No NAT" exclusion is from our LA...

Hi my name is IvanI'm going to working a  Firewall ASA 5520 like firewall of perimeter, it will in HA A/S and VPN SSL and moreover I would like to work the Firewall like the Switch Core in the network. If I work the ASA like Switch Core, the Firewall...

Hi ExpertsWe have an Active/Active ASA 5520 setup, as i know in Active/Active setup there is no remote VPN access, So i could overcome this limitations?I have a solution but i dont know if it is ablecable or not? we have a spare ASA 5510, so i can us...

Hi ,we have AIP-SSM 10 and having lower version of 6.0(5)E2 engine.To update to the new version we had tried to copy the current config to the remote server using scp. During the process we faced the below error  AIP-IPS# copy scp://vpsadmin@192.168....

Hi Before I get started, a huge "Thank You!" to Varun and everyone else for all your help with my previous questions. You have made life a lot easier for me. After reading the post titled "ASA 5520 nat access-list query for internet access" I realize...

Hi Experts,Is there any way to create a user with administrator privilege, which is not visible in running configuration??Mean :- When someone type "sh run " this user name wont visible to the user.ThanksVipin

Hi,I was wondering if  it is needed to license the IPsec VPN clients in the ASA5500 firewalls...I know that you have license the SSL VPN peers (AnyConnect). I am almost sure that for the IPsec you don't have to.Could anybody please confirm this?Any h...

Hello,We plan to use nessus plugins with cisco nac. For some users, the computer should have any antivirus installed and updated before it can access network.For other users, the computer should have mcafee antivirus installed and updated.we tried to...

Hi,I've been trying to configure the threat-detection scanning-threat shun feature on my ASA5510 running 8.4(2) for some days now. From searching the support community I can see that I'm not the only one having a problem with this feature. The proble...

Hican anyone in simple term tell me what is the difference between access-list extended 123 permit host 1.1.1.1 eq host 25 2.2.2.2andaccess-list extended 123 permit host 1.1.1.1 host 2.2.2.2 eq 25can we use this in both firewalls and IOS ?

Hello!Please, could you help me? Is it possible to install ISE on Catalyst 2950? In Component Compatibility Guide http://www.cisco.com/en/US/docs/security/ise/1.0.4/compatibility/ise104_sdt.htmlCatalyst 2950 only support 802.1X and VLAN.At first I ne...

Hi Seniors,I have one cisco 881-K9 router and IOS version loaded there is 15.0.I set up the IPSec VPN on that router and configure the firewall by using CCP guru.My boss ask me whether can set up URL filtering and Intrusion Prevention on that router....