Network Security

i am confused with the requirement of the "backup interface vlan "command requirement on ASA 5505 . i read from Cisco doc that with the implementation of this command firewall blocks all through traffic on backup interface unless the default route th...

I have several Cisco 877 that I use at branch offices with IPSEC tunnels to our head office and I am trouble shooting through the syslogs when using the "ip inspect log drop" command so I can see if any traffic is being dropped over the tunnels.Altho...

Hi,Hosts on the inside interface need to initiate connections to hosts on the F5_LTM interface. The access-lists are in place its just the NAT I'm unsure of, the NAT config is at the botton of this message. If my understanding is correct  nat (Inside...

Hello Experts.I have a 4260 that is rebooting every single minute. When I access it via console I do not see anything in the console window. It is death. Before the RMA what else can I  troubleshoot?Thanks.

Hi Guys, I'm having an issue with NAC Profiler 3.1.1_18 when trying to profile servers using DNS Name. I have one collector configured to  do DNS Collection with Zone transfer enabled. If I do a search with string *.server.*, the system returns me ju...

Hello,I have a customer who has bought NAC 3315 appliance used for NAC server but they didn't buy Guest Server. Now the customer wants to install Guest Server software on NAC 3315 appliance.Actually the customer has downloaded and installed Guest Ser...

hai friends, i want to create site to site vpn between two sites but both the sites having dynamic ip.my question is ,is it possible to create site to site otherwise any other way is there ..if site to site is possible send any documentationthanks

Background:Our facility sits between two separate facilities. Facility A is directly connected via fiber, and an ASA5505 whose current sole job is to NAT our internal (192.168.80.0/21) addresses to addresses routeable by Facility A. Facility B is con...

Is it possible to have wccp redirect any given host to one cache engine for a period of time.  For instance if I have a host X and it gets redirected to cache engine Y, I would like it to continue using that cache engine for the duration of its sessi...

Pen test uncovered three vulnerabilities, manged to fix one of the three and trying to reslove the remaining two.Those are ASA 5520, running codes 8.0 and 8.2::TLS/SSL Renegotiation Allowed - Fixed - Upgraded to 8.2(3) after reading the Cisco vulner...

Hi all,I am facing connectivity problem for connections between 2 offices. Server from my office A need to establish connetions to a particular server in office B for data pull. However data pull always fail. Below is the error logged.Deny TCP (no co...

I've got a 5510 that is reaching the 130,000 max concurrent connections limit and shutting down access to any traffic trying to traverse the firewall.  I've isolated it down to a third party company we use to send out broadcast marketing e-mails.  We...

Hi all,I have a question about Cisco ASA 5510 8.2.1(11).Is it possible to permit only a type of traffic over a specific tcp port?I mean, if I open traffic on port tcp/80, I would like to be sure that only web traffic passes on this port and not, for ...