Network Security

Hi all,   Basically I am taking my first stab at configuring a fwsm in a 6509 with a sup 720. The scenerio I need help with is this: I have 2 SVI interfaces coming into my layer 3 switch. I want to pass these 2 SVI interfaces and my ACS local SVI int...

We have an ASA5505 with the Sec+ license.  I'm comfortable setting up failover using tracked routes, and allowing simple inbound traffic to the current mapped interface IP.  This requires that all internal destination IPs be PATed to the current inte...

I'm hoping someone might be able to assist with this issue I am seeing.  My 5505's "outside" interface drops about every 30 minutes and the log is registering a lot of "%ASA-4-711004: Task ran for 389 msec, Process = Dispatch Unit, PC = 81bed79, Call...

Hi,Nac Profiler had discovered the endpoints but the end points are not getting profiled automatically.It shows "Not Profiled" Message in Pie chart of NAC Profiler.Also in DHCP Vendor it is Showing "null" message.Kindly help on this also provide sugg...

Dear all,I am looking for PKI solution using Aladdin eToken incorporated with Cisco by authenticating ysers against Cisco ASA using PKI (certificate) stored on the eToken. Can anyone assist me how to do it? Below is my info:Cisco ASA 5520.ASDM versio...

Hi All,          Is there a way to know the list of all  the signatures that the ips has triggered for the last 24 hrs.......i need just the signature id that the ips has triggered for the last 24 hrs......is there a way to know that?....any suggesti...

Hi,i have been doing some ZBF configuration on 2811 router with IOS version "advsecurityk9-mz.124-15.T10"i configured a zone-pair from inside to outside with its policy-map and class-map (for the traffic that are initiated from inside),the flow is 90...

Hi All,I have Cisco ASA5505 configured with one inside VLAN (10.10.10.x) and one OUTSIDE VLAN.I have activated an IpSec Site to Site TUNNEL VPN with a partner and he wants to see my network like 10.10.20.x (instead of 10.10.10.x) because he has alrea...

Hello:I have a PIX501 with the standard license on it.  Can it be configured so I can VPN directly into it?  I know I can configure it as a site-to-site VPN.  Does anyone know for sure?Harrison

Hi,I need to configure hairpinnig to asa with 8.3 software.There is a web server located in lan. Clients have to connect it via public name, and name resolves to public ip.I have static nat for that server - it works fine from outside, but inside hos...

Recently, my existing CSC SSM module license has been expired &I need to know the steps needed &product ID to renew an expired License CSC SSM module hosted on ASA-SSM-20 appliance :Tip,The system  was licensed with Base &Plus license ,500 users. 

HiI have a ASA 5510 that has a couple of site to site vpn connections, they workfine, the only problem is that they cannot reach the webserver in the dmzVPN subnets 192.0.2.0 255.255.255.0, 192.0.4.0 255.255.255.0, 192.0.6.0 255.255.255.0DMZ 172.16.0...