Network Security

Hi,I have a pix with 6.3(5) versionand I am  trying  to open  ports 10207,10210,10214,10009,13510 to a public IP address from my  192.168.5.0/24 LAN network. I tryied so many ways and its not working throught pix (I tried to access the same ports fro...

     We have a rather simple setup:An ASA 5510 is at our administration building. The 5510 connects to several 5505's using site to site IPSec VPN at our operations buildings, because the 5510 is connected to our Domain Controller. We recently had to...

Hello,We have a Cisco ASA 8.3 and we're trying to configure NAT with multiple types of NAT.We have a static NAT to an inside host from 1.1.1.2.Internet Interface is on 1.1.1.3.Users get NAT (PAT) on 1.1.1.4VPN Subnet "No NAT" exclusion is from our LA...

Hi my name is IvanI'm going to working a  Firewall ASA 5520 like firewall of perimeter, it will in HA A/S and VPN SSL and moreover I would like to work the Firewall like the Switch Core in the network. If I work the ASA like Switch Core, the Firewall...

Hi ExpertsWe have an Active/Active ASA 5520 setup, as i know in Active/Active setup there is no remote VPN access, So i could overcome this limitations?I have a solution but i dont know if it is ablecable or not? we have a spare ASA 5510, so i can us...

Hi ,we have AIP-SSM 10 and having lower version of 6.0(5)E2 engine.To update to the new version we had tried to copy the current config to the remote server using scp. During the process we faced the below error  AIP-IPS# copy scp://[email protected]....

Hi Before I get started, a huge "Thank You!" to Varun and everyone else for all your help with my previous questions. You have made life a lot easier for me. After reading the post titled "ASA 5520 nat access-list query for internet access" I realize...

Hi Experts,Is there any way to create a user with administrator privilege, which is not visible in running configuration??Mean :- When someone type "sh run " this user name wont visible to the user.ThanksVipin

Hi,I was wondering if  it is needed to license the IPsec VPN clients in the ASA5500 firewalls...I know that you have license the SSL VPN peers (AnyConnect). I am almost sure that for the IPsec you don't have to.Could anybody please confirm this?Any h...

Hello,We plan to use nessus plugins with cisco nac. For some users, the computer should have any antivirus installed and updated before it can access network.For other users, the computer should have mcafee antivirus installed and updated.we tried to...

Hi,I've been trying to configure the threat-detection scanning-threat shun feature on my ASA5510 running 8.4(2) for some days now. From searching the support community I can see that I'm not the only one having a problem with this feature. The proble...

Hican anyone in simple term tell me what is the difference between access-list extended 123 permit host 1.1.1.1 eq host 25 2.2.2.2andaccess-list extended 123 permit host 1.1.1.1 host 2.2.2.2 eq 25can we use this in both firewalls and IOS ?