Network Security

When IPSEC traffic is de-crypted on a cisco 877 Dialer interface, what is the next step? If the Dialer interface is a member of the 'outside-zone' (ZBF) and the packet SA is 10.1.1.1 and the DA is 10.2.1.1 (which is part of the 'inside-zone'), does t...

Hello,I am sorry if I am asking a newbie question. I am trying to setup a firewall on our CISCO 2911 router. It has only 3 ports one of which is used for management only purpose. The other two ports are setup as follows:ISP|router 1 -CISCO 2911------...

Hi there,New to SIP and SIP ALG.Just wondering, what is needed to activate SIP ALG in IOS F/W 12.4(22)T?Thank you in advance.

Hi,I have a 2811 running 12.4(24)T2 with Trend Micro content filtering located in China.It is configured with both category filtering as well as local filtering.Web site load times are unreasonably slow. If I add a site to the local whitelist (so tha...

Although I am still not entirely sure that our Dynamic PAT is the root of the problem, it seems prudent to explore changing this toa static value.  I have changed this to a static object, and we seem to still have outside connectivity, which is great...

Hi I am experencing a strange thing in my NAC deployment . I have deployed  OOB L2 VGW  .Now the problem is arising on some of my client PC's for the first time when Nac agent is  installed the PC's go through every NAC process correctly but after fe...

I've been researching WCCP as a potential technology to use for a project, but I haven't quite come across the authoritative source with a list of WCCP service groups.  I've found a small list here thankfully, http://doublef.org/archives/be-transpare...

Hey guys I have a couple questions - I have two ASAs 5510 running failover (active/passive) and I want to configure priority-queue on the outside interface and when ever I try to configure it rejects my command. If I do a priority-queue ? it says ava...

Hi everybody, I have a question for the CSC experts,I want to know if the CSC Module with Trend Micro software will help me to allow my client's users to navigate only from 12h00 to 13h00,I know I could configure that and that it works, but I'll expl...

I have a customer in which we were deploying their AIP-SSM modules in their ASA's.  They have 3 sites with a VPN tunnel mesh between them.  All was working well until we attempted to upgrade their signatures to the latest version (524).  Units were r...