Network Security

Hi all,I configured an asa to redirect http traffic to an ironport device via wccp. The ironport is supposed to authenticate via ntlm sso, but it works only with internet explorer.I did a network trace and the first answer to both browsers is the sam...

A customer of mine sent a ticket in, he is seeing requests across the ASA from certain addresses going to cisco1-mhk.kansas.net. I logged in and looked at real time logging filtering out 199.240.130.1, and found all the routers behind this firewall a...

I heard that the NSEL license is now included with all ASA's; how do I get a PAK for my existing ASA's?  I'm assuming it's free for the asking too... like the VPN-3DES license.

Ok so I'm deploying NAC in L2 OOB VG mode with computers plugged in behind Cisco IP phones.Here is my configuration:VLANSCAS - 800CAM - 810access - 820auth - 830voice - 20Switch ports:User switch - Catalyst 3560interface GigabitEthernet0/35descriptio...

Hi There,Can you please help, I have servers sitting on the internal LAN inside 1( 192.168.76.0 /24 ) I would like all the hosts on this network to browse the internet by using the external address of the firewall (outside), I need to do a NAT to hid...

Hi,My NMS is reporting that the below interface is Up/Down.  I cannot find any reference to this interface in the CLI.  It is not the mgmt or other gig interfaces.  Does anyone have any idea what this hidden interface is?  Appreciate any feed back.Di...

My organization has the requirement below, and was wondering if we can leverage the ASA with Botnet Traffic Filter: /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:...

I have an FWSM module broken into several contexts and interfaces, it seems that whenever I push 500-550Mbit through it that it starts to create latency in the 100 times normal range for connections as simple as a ping.  I saw a reference on cisco hi...

Hi everyone,My partner is looking for the Smartnet for his PIX525, but PIX525 is eol the replacement is ASA5520-BUN-K9 and ASA5520-k8.Questions:1.     Can the smartnet for ASA above work with His PIX525? Y or N2.     If Yes, which Smartnet should I g...

I'm back again with another question.  The diagram below is the layout I'm working with.  The ASA and Bordermanger are running side by side for now until I can phase everything over to the ASA, so it makes everything a little complicated right now.  ...

Hi,I am getting the message below when trying to access a DMZ host from the inside network. I am able to ping the host but cannot established TCP sessions from inside to DMZ. I checked with packet tracer and the packet is allowed. However when trying...

  Dear All,Currently in my office i am having Cisco ASA 5510. I done port forwarding on ASA & using my public IP for accessing my Citrix Application from anywhere on internet.Now i am having another Web Based application which i want to access as sam...

Hello,In our environment, workstatios that do not conform with the requirements remain under Temporary Role until the remediation is done.In Event Logs I see that the Workstation is just under Temporary Role, but do not know why it is in Temporary Ro...