Network Security

When the requirement does not explicitly mention "fair queue", should we enable fair-queue in class-default? I understand it is probably better practice by having fair-queue enabled but I'd like to know the cons and side effects it may have. Say I ha...

I am new to CISCO!I currently use MS ISA Server 2006 to protect a windows internal network, where there is also an MS Exchange server. I have acquired a Cisco 5510 to enhance security at main office. Later I will have ASA 5505 for branches, including...

Hi all,I am trying to set up SSL VPN with two-factor authentication on an ASA5510 with software version 8.0(4). I want to use LDAP for actual authentication and user mapping, but require a valid certificate signed by a particular local CA to connect....

trying to upgrade an old pix as a migration for getting some asa's installed.it doesnt have enough flash to do the upgrade straight up so I have to do it from monitor mode, trouble is I cant get it into monitor mode.I have read at least 20 threads ab...

Because ASA5585X doesn't support CSC moudle, how can do URL filtering on ASA5585XThanks in advance,

Hi,I am facing some issues on static NATafter my IOS upgrade from 7.2(3)I am getting some peculiar error%ASA-6-302013: Built inbound TCP connection 654734 for dmz:172.19.19.141/27685 (172.19.19.141/27685) to inside:192.168.16.250/3389 (172.19.22.91/3...

Hi Guys, i need your help i want to block teamviewer for certain ip adds  Any idea...RegardsTabish Bhat.

Hello,I have the following problem:Our new provider (cable) has got an MAC address filter on it's devices.Furthermore: Every single official IP needs a different MAC to bypass this filter.In my case:I've got the official IPs (e.g.)A = 109.2.1.3 / MAC...

Is there a document that explains how the configurations are updated to the standby ASA and what needs to be manually added tot he ASA?  I have two ASA 5510 running ASA ver 8.3(2) and ASDM 6.4(1).  When I add static routes to the primary ASA the rout...

Hi Guys,I just made a move from a PIX 506 to an ASA 5540.  I have a user that currently logs into a web portal and runs a job.  It is now erroring out.  When I run the test it gives me the following message:Testing ports... Port 1433: FailedPort 1150...

I've got a question on the physical topology of a two pairs of clustered firewalls. Pls see the image below.Gi0/1 of VPN Firewalls and Gi0/0 of Firewall Cluster are connected directly. Is this a good physical topology to configure a cluster ? What pr...

Hi!As the topic say; is it possible to set up so specific users only have, say, 2 hours of internet access per day?They should be able to log on any time of the day, and so many times they want, as long as the total usage does not exeed 2 hours per d...