Network Security

Hi,We have ASA 5580-40 with rel ver 8.1(2). During testing mcast, we found that if we do not configure IGMP static group or join group with specific mcast group ip addr, the mcast will not work, the client application can not join the specific mcast ...

We have a pix 501 through on which we have one pix to pix vpn up to a remote site(A). In case of its failure i would like to configure a redundant ipsec vpn with site B this again will be a pix to pix vpn.Can anyone suggest me the config how i can ac...

Our ISP has two routers onsite.  The primary router has a 40MB connection to the Internet and the secondary router as a 20MB connection to the Internet.  I am configuring our two 6509's with a FWSM in each so that the MSFC is inside and the FW is fac...

I'm trying to traverse from my inside private IP address (10.x.x.x) to my public IP address translation (172.16.x.x) in order to take advantage of the ACLs that are already applied on my outside interface.  For example:Host 10.0.0.1, translated to PA...

Hello,I'm using Netflow on our ISP's Cisco internet router.  It sends Netflow info to the outside interface of our ASA and I PAT UDP port 9996 (Netflow) to our Netflow server that sits on the inside of the ASA firewall.  the problem I have is I just ...

Hi,I would like to know how to NAT multiple webservers to one public IP on port basedi.e. i have 2 internet facing webservers (a.b.c.d & e.f.g.h) on the DMZ zone but have only one public IP (x.x.x.x). I want to access both these servers on the same p...

Hi there,Recently upgrade the two ASAs to 8.3 code. Besides all of the fixing up that had to be done and the few things I had to wrap my head around, all is good with the upgraded config. Now my problem is that any new rules I create throught the ASD...

HI,Have an issue with FWSM (4.1.3) and DHCP Relay.Where the DHCP request is being forwarded and the reply receieved but it is not getting to the Server (which is in continue request state) to obtain the IP Address.XXXXXXXXX/TC3inside# DHCPRA: relay b...

Hi. I have a 5510 authenticating successfully with a RADIUS server.  I'm using it for VPN authentication and it works great.  I would also like to do this for adminstrator access to the ASA.  When I turn it on though, anyone that can authenticate for...

Hello,We have Cisco ASA 5510 256RAM running 8.2.4 with CSC 6.3.1172.4, it slows down internet traffics drastically when we do speed test, we get something like thisIt the computer is bypassing the CSC, it getsThis was done when there's very low traff...

Hey guys,This might actually go into Networking Basics because of the nature of the problem, but I tossed it in here because of the Cisco product involved. Long story short, I need to do some detective work to figure an apporpriate IP address for a N...

We have 2 FWSM in Active / Active mode. for one of those context.The another context, now it's in test mode, and we like to protect some segment of servers, in this segment we have Two Citrix Netscaler to provideload balance to a web service that we ...