Network Security

Hello,Just want to clear how can I configure the NAC to direct the user to the untrusted interface of CAS automatically.Now, I am manually entering the ip of the untrusted interface to my internet explorer before I can have NAC agent to download.How ...

Hello,I have 2 ASA 5520's in active standby mode, they are on IOS 8.2(2) and have 512mb of memory. For some reason the memory usage went from 70% to 85% at 4pm yesterday.  When I look back at the the changes at that time all I did was add a subnet to...

Hi,I am setting up a zone-based firewall and NAT for inbound public traffic to internal private IP addresses.  I am using a 2911 router with all the security bells and whistles. Do I set the destination as the public address or the private? I found a...

i'm having all sorts of problems w/ VPN stability on the 8.2 and 8.3 IOS lines for my ASA.  should i take it back down to 7.0.8?  this is really pissing me off.  what's up w/ all the bugs?

Hi, what happens when the nat table (memory !) is full on a firewall module 4.0.All traffic is stopped ? MR

when designing DMZ we usually put a dedicated L2 switch for connectivity between firewall interfaces and public servers...and we create vlans in this switch according to DMZ..what risk can be found if i create these L2 vlans in our collapsed distribu...

Hi Everyone,I currently login to a FWSM (remotely) on my network but I do not know what the chassis is. Also if I do find the chassis with a FWSM in it, I'm unablt to do the session command as this is not allowed via tacacs authorization.Any usefull ...

Hello,I'm using the LMS 3.2 on a Windows Server 2008.I've got an issue in using dcrcli with DCRCLIFILE.I correctly wrote the DCRCLIFILE.dcrclifile.txtadmin networkand I added the enviroment variable with the right value.DCRCLIFILE=c:\Program Files (x...

Hi,Admins are no longer able to initiate FTP from the Inside network to the same servers at the Outside network, once upgraded FWSM from 1.x to 4.0.x.FTP inspection in the policy map is there, as you know it is the default config.Appreciate your expe...

Hi,we have bought the CSC modules few years back and now the licence has been expired few months back. we used the CSC for only a month when we bought just to test these and after that they are left without doing anything and expires. Now we would li...

I wanted to download the CNA from the Cisco website until I ran into a few licensing agreements.Am I allowed to download the software for free? It mentioned Cisco might charge me for using the software?I do not own any equipment however I am in the C...

Hello all,I have a VPN with a vendor, but he's using the same inside networks that I am, and he apparently can't NAT on his side so I'm trying to setup dynamic NAT for his incoming and outgoing traffic on the tunnel.This is the config I've come up wi...

                  Hello All,                              I am trying to create a access-list that allows traffic from a source ip to a global destination Natted address on my firewall. The problem is the sending company does not know what port they ...