Network Security

I have set up an access-list fot CBAC and everytime they go to a HTTPS site it does not allow them. How can I write an access list that will allow this? Below is what I currently have -access-list 100 remark Firewall Access Listaccess-list 100 deny t...

Hi all, i want to know how can i know what is the user limit on a CAS appliance, when i see the licence on CAM only show the licence type of CAM and the number of server supported but not if CAS is 100,250,500,etc...Thank you

Hello,I would like to translate a matching destination IP Address from a specific source network to a specific destination IP Address.Is this possible to be done on Cisco IOS Router?

Our ASA 5520 firewall is running 8.0(4) IOS.I have an internal L2L VPN terminating on my firewall (from an internal remote site) on ENG interface.With the default "sysopt connection permit-vpn" command enabled, VPN traffic is allowed to bypass the EN...

Hi, we have a problem with authenticating to the trustpoint for CA on WIn 2008 Enterprise machine. Enrollment url enrollment url http://CAWin2008/certsrv/mscep_admin/ We are getting following error ERROR: receiving Certificate Authority certificate: ...

Hi,I am new in to NAC and I have an implementation coming up . we have sold them 2 NAC servers , 1 NAC manager and an ACS server.Customer has VPN users, Wireless users and 3 remote branches ,I am planing place the devices in OOB , Virtual IP and L2 m...

Hi,after updating from CSM 4.0.1 to 4.0.1 SP1, the CSM does not understand NAT object rules anymore and tries to delete them from the device! Not funny!!!Does anyone know why?Thanks and cheers,Uli

Hi,We have the scenario attached in this post, where we have the same subnet (172.21.0.0/16) behind our DMZ and our management interfaces on our Cisco ASA.Supposing we can’t modify our subnets, and we want to use source routing on the ASA as below: A...

We’re planning to implement a High Availability environment with no one SPOF (topology attached)The environment consists in:2- Routers 2901 which will receive internet links2- Catalyst 3750 acting as a core cause it’ll receive a few more services.2- ...

Hi,here is the thing.I have asa 5505 that should be connected to two core switches on the inside, and two edge sw on the outside.Cores are interconnected.Edge sw are inteconnected.Since ASA 5505 do not support SPT, I guess the only way not to close t...

I have a couple quesions in regards to timeout values.  Is there a show command on the ASA to see what the default timeout values are set to for the various protocols?  If not, is there a list of them somewhere?We have our ASA in front of ISA and are...

Has anyone upgraded an ASA5520 from 7.x to 8.4 in one step? Release notes for 8.4 state that you can "...upgrade from any previous release directly to 8.4..."  I've read the previous version release notes and see the various changes in NAT etc that 8...