I have NAC deplyed in OOB VGW and have version 4.8. Due to restricted internet policy, people are using internet through broadband devices. Is thatpossible if NAC can block these broadband connections.
Hi, We have a vlan that we protect from inbound traffic: 10 permit tcp any any established (189 matches) 20 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq 554 30 permit udp any xxx.xxx.xxx.xxx 0.0.0.1 eq 5004 40 permit udp any xxx.xxx.xxx.xxx 0...
Helloi have a connection that is being made pretty quickly, but when i change the ip and try the connection i am not able to quickly go through the connection process and because its not happening fast enough the connection is being dropped,how can i...
I have a 5505 running 8.3 and am using ADSM 6.3 to configure it. I have a dynamic PAT setup for the network I'm on and am trying to setup static bidirectional NAT for SMTP to a particular host. (I do have two external connections in this configura...
Hello,I am trying to have users connect to a Windows 2008 share over a 5505 without being prompted for their Domain credentials.Connection works well except for being prompted for their Domain credentials.I was wondering if there was a solution to th...
Hello,On my TACACS+ server, I would like to set up a user so that when they do a 'show ?' command, it will only list the commands that they are allowed to do, instead of the entire list. I searched all over and couldn't find any info on this. Does an...
Dear All,I have a problem with simultaneous L2 and L3 NAC deployement.I have a CAS configured as Real IP gateway, Inband. Previosly i can have the NAC running well on L3 deployment using PBR.I configured PBR on distribution switch to intercept the tr...
Hello Experts,I am facing some issues with vpn tunnel.I have formed the vpn tunnel between cisco pix (ver 7.2) and fortigate(othervendor).Once i initiate tunnel from fortigate i can see ike phase up with ipsec upfor eg 1 IKE and 5 IPSEC and all subne...
Hi,Am doing some checks on some data sheets and am getting a little confused with some of the details. Like for example a pix 501 where the data sheet claims support "Concurrent connections: 7,500". I am thinking that this is two way covering all t...
Dear's,Any different configuration for 6500 or IDSM-2 if i m placing with FWSM???? . I will place IDSM-2 in inline vlan pair mode,and all SVI will be created on FWSM instead of MSFC.Any suggestion please on above design and configuration.Thanks
Hi I have an ISR in a DMZ behind an ASA, both are doing NAT. The ISR is the VPN tunnel termination point to remote sites, but I do need to SSH into it if the internet goes down (in the cloud). My issue is I need to SSH to the outside interface of the...
I would like some help please.We have purchased a 5510 and I am new to this piece of equipment and need some help.I have found a lot of information but they seem to mostly use the commend line and I am using the ASDM to configure my information. I j...
My current setup has an ASA and a VPN3k with a public IP in the DMZ. I've successfully tested using the ASA to terminate VPN connections and am planning on how best to retire the VPN3k.Here is an example using private range IPs to represent the publ...
