Network Security

Dear Gurus!!!!!Configured ASA 5510 ISP failover and working fine.My ASA as configured as DHCP server also. So its serves IP addressing details including mask,default-gateway, DNS server IPs.Here my issue is whenever my ISP failover occurs my ASA send...

Hi,Trying to implement the  NAC Appliance 4.7.2 with  NAC Agent (same version of course - 4.7.2.10).One  of our Reqirements is based local WSUS check, with Severity validation  /Custom(All) settings.Is it normal that all of our Windows XP  client hav...

Dear Gurus!!!!!Configured ASA 5510 with CSC module and working fine.Here i likes to configure, Whenever any users from outside accessing my firewall (like VPN users) that logging information i need to send one particular mail ID.Simply, i likes to en...

Hi,Can we configure IPS in such a way that it can bypass traffic (few subnets) and inspect all other traffic in inline mode?Aman

Please see the included diagram.I need to move the client machines off of the 3750 (and their DHCP dependency on it) to the SGE2010 and absolutely route their internet traffic out through the outside interface on the 5505. They must also be able to c...

EazyVPN issues - IPSECHi guysive recently setup a EazyVPN on a cisco 3g router with a ASA5520.  the tunnel comes up ok and the remote users can browse the net.The problem is accessing the lan behind the ASA.  when you do a show cry ipsec sa at the AS...

Hi,Apologies if this is in the wrong place (Can it be moved if it is ?).Our firewall expert has gone off on long term illness leave and I am trying to pick up the pieces :-(We have an ASA 5520 (local office) talking to another ASA (remote office) via...

HiI have a 5510 with just a inside and outside interface, everything works on the lan inc internet access and exchange hosting to the net, but I have another exchange server on the wan and I can't get to that because I'm not natting inbound traffic a...

I was wondering if anyone has created or is aware of a custom IPS signature that detects someone using SSH on ports other than 22?Thanks in Advance

We are runing PIX 535 with software version 8.02. In ASDM,  I see  anti-spoofing is diable in all interfaces. If I enable it, is there any negative effect? Can I enable it in DMZ, inside, and outside interfaces?Thanks

Hi guys, Has anyone come across problems with missing Bookmarks on an SSL RA VPN (ASA 8.4, ASDM 641)?I have an SSL group policy which is configured to use a Bookmark list.  When a user signs into the SSL VPN, they can see other settings that have bee...

hi guys,  a customer have 2 pix 525 with ver 7.0.1 in a failover configuration with serial cable and 2 sc fiber interface and 2 fastethernet 1 used for failover.the strange behaviour is that when i try to do traffic from inside to dmz or dmz to insid...