Network Security

Cisco_Sonicwall - VPN policy's Destination Network (Phase 2) Mismatch

Hello everybody,I need your help with a VPN that's driving me crazy.I have to establish a tunnel between a Cisco C837 and a SonicWALL PRO 4100.- The Cisco router has a dynamic public IP.- Cisco local network: 172.16.41.24/29- The SW has a static publ...

ASA 5520 Mgt. Interface Traffic/Routes

Do the management interface routes tie in with the other routes on the ASA or are they separated? I'm trying to figure if say network 10.10.2.0 is granted management access would that that route conflict with site-to-site VPN traffic from the same so...

L2L VPN Questions: xlates? no sysopt permit ipsec?

setting up a L2L vpn from a 5510 to someone else's Checkpoint and I have a couple questions.First of all if we are using static nat...translating our private addresses to public addresses...should the encryption domain reflect the translated or untra...

ASA 5510 not loading after software update

Due to Advisory ID: cisco-sa-20090408-asa, I have tried to update a new ASA 5510 from asa708-k8.bin to asa812-19-smp-k8.bin, asa804-28-k8.bin, and asa804-k8.binEach time I tftp the new image across, and modify the system boot entry to boot the new im...

VPN Too Slow

HiI have established a VPN Lan to Lan connection between my office and a remote peer. The connection is used for ftp and files have been flowing through smoothly. Recently the connection became very slow and we suspected the Server which was very old...

ASA EIGRP Static Route

I have an ASA 5520 with EIGRP enabled and am redistributing static routes. I have a static route that is attached to an interface. If that interface goes down will the ASA still distribute that route?Thank You

asa failover

how i configure failover

IPS 4240 problem

Hi All, we've installed IPS 4240 since 6 months ago and everything worked fine. Then I noticed time in IPS was not correct, then in the IDM, I've changed summer time to 60 minutes offset to get the right time from NTP. then reboot the IPS, since that...

Help with 506e - Please!

I inherited a network with 2 506e firewalls. For some reason they can only be accessed from one specific PC. Of course, it's not my PC. I was informed that "it is very sensitive to the Java version that is loaded" and that mine may be the wrong versi...

ASA5540s failover automatically switchover issue (Ac/Standby)

Hello Pro,I have two asa5540 configured in standard Ac/Standby failover mode, but often switchover automaticlly. Probably in 30 minutes switchover to secondary asa5540 up. when I manually switchover back to primary asa5540 by issing failover active. ...

Remote Access VPN

HI,I tried to configure remote access vpn on pix 515e with 8.0 pix software version through CLI with the following link http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008060f25c.shtml#cli I tried to connect to the vpn...

WebVPN will not start keeps throwing %ASA-6-710003 errors in the log

I've got a really basic WebVPN configuration going and for some reason I cannot even get the portal to show. I keep receiving the following error in my syslog:%ASA-6-710003: TCP access denied by ACL from x.x.x.188/2856 to outside:y.y.y.14/443Here's m...

ASA5505 - Cannot connect with Cisco VPN client

half open v embryonic connection

Good Day,We have an ASA 5550 v8 installed to provide nothing more than one to one dynamic nat in a large college residence hall. (One public IP is reserved for PAT in the event that the public one to one pool is depleted).As a college residence facil...