HelloOn ASA 5540 we are terminating 6 IPSEC tunnels and Remote Access VPN. How do I identify which Tunnel is eating more bandwidth.Remote Access users mostly connected after working hours, so those are not my concern for now.ISP---------Internet-Rout...
Hi everybody,I was wondering if you know, how can I get the latest pdf file of the best practices of IPS 4260 series.One client is asking us an official file in order to approve a request for change (RFC)I mean, I want to update the latest signature ...
Hi ExpertsWe got one application who's ports are unknown to be opened from inside and outside of ASA, For test purpose we allow permit ip any any and it works. How do I identify the ports. Access-list is applied on inside and outside interface of...
i am confused with the requirement of the "backup interface vlan "command requirement on ASA 5505 . i read from Cisco doc that with the implementation of this command firewall blocks all through traffic on backup interface unless the default route th...
I have several Cisco 877 that I use at branch offices with IPSEC tunnels to our head office and I am trouble shooting through the syslogs when using the "ip inspect log drop" command so I can see if any traffic is being dropped over the tunnels.Altho...
Hi,Hosts on the inside interface need to initiate connections to hosts on the F5_LTM interface. The access-lists are in place its just the NAT I'm unsure of, the NAT config is at the botton of this message. If my understanding is correct nat (Inside...
Hello Experts.I have a 4260 that is rebooting every single minute. When I access it via console I do not see anything in the console window. It is death. Before the RMA what else can I troubleshoot?Thanks.
Hi Guys, I'm having an issue with NAC Profiler 3.1.1_18 when trying to profile servers using DNS Name. I have one collector configured to do DNS Collection with Zone transfer enabled. If I do a search with string *.server.*, the system returns me j...
Hello,I have a customer who has bought NAC 3315 appliance used for NAC server but they didn't buy Guest Server. Now the customer wants to install Guest Server software on NAC 3315 appliance.Actually the customer has downloaded and installed Guest Ser...
hai friends, i want to create site to site vpn between two sites but both the sites having dynamic ip.my question is ,is it possible to create site to site otherwise any other way is there ..if site to site is possible send any documentationthanks
Background:Our facility sits between two separate facilities. Facility A is directly connected via fiber, and an ASA5505 whose current sole job is to NAT our internal (192.168.80.0/21) addresses to addresses routeable by Facility A. Facility B is con...
Is it possible to have wccp redirect any given host to one cache engine for a period of time. For instance if I have a host X and it gets redirected to cache engine Y, I would like it to continue using that cache engine for the duration of its sessi...
Pen test uncovered three vulnerabilities, manged to fix one of the three and trying to reslove the remaining two.Those are ASA 5520, running codes 8.0 and 8.2::TLS/SSL Renegotiation Allowed - Fixed - Upgraded to 8.2(3) after reading the Cisco vulner...
