Network Security

Hi expert,I have configured in a C3925 router, with IOS version 15.1(2)T3 two ip sla probes to two different destinations.with a mib browser and HP NNMv9, i see in the rttMonEchoAdminTargetAddress location(.1.3.6.1.4.1.9.9.42.1.2.2.1.2), the same wro...

Hi Expert,we are using firewall ip as default gatewaywe have allowded icmp from firewall , still we are not getting firewall ip in tracert command.Thanks in advance.Regards,Surya

Ok, the bit that works.I have a rule on our ASA, source=dmz server, destination=domain server, service=domain which works fine and permits access to my domain controllers and access shared folders from a test DMZ server...and the bit that doesn't.Wha...

Hello,We have a scenario where on a router we have multiple VPN Tunnels (IPSec) established, this router is configured to send SNMP traps (find attached SNMP config). The problem is that once one of the Tunnels goes down, we are receiving an SNMP tra...

I have attached a drawing of our network.  We have two 6509's connected to two Cisco 2811 (onsite) that the ISP owns. I am trying to get one side up and running before I worry about redundancy and so forth.  For this reason I have set all the HSRP pr...

Hi,I'm in a situation where we are trying to convince a client to switch from their Sonicwall NSA 3500 to an ASA 5585-X. The need is bandwidth. One issue that keeps coming up is the Sonicwall tries to be the swiss army knife of security devices with ...

Hello!We imaged and IDSM-2 with the latest 7.x code and went thru setup, but cannot access the GUI. We get a "page cannot be displayed". You can ping it fine from inside and outside the subnet and the access-list permits the subnet. going into config...

I have an internal host initiating a connection to an external host.The external host is denying the connection and claiming that it's a mis-configuration on our ASA that's the cause.The internal host is NATted on the ASA - and we provided that IP to...

hey all, have a customer using the "name" feature where IP is mapped to a name. basically, the name is used everywhere including the acl. we just need to update the IP associated with the name but here is the problem (when using two approaches).remov...

i have asa 5505 with the asdm v5.2 (4), and the asa v7.2(4). This platform has a base license. if i upgrade adsm and asa on v6.2(1) and v8.2(2) if I lose my license and that you need to activate them? i configured site to site vpn (this firewall and ...

Hello,I have a network provided from Datacenter.I doubt this design will work but before pointing finger on Datacenter, I want to confirm.Design :[Internet] ---> [Switch] ---> [Cisco ASA] ---> [Server]Firewall : Cisco ASA 7.2 (4)They configured singl...