Network Security

Hi all,I have a requirement to setup a IPSEC tunnel to allow access to remote users to a subnet on inside. The same subnet is already in use elsewhere on the inside network. My vpn tunnel terminates on the ASA (7.2) on the outside interface. I want t...

Hi:Is it possible to track more than one object with IP SLA in order to avoid a single point of failure.The action is taken only after let's say the icmp echo failed on address 1 and address 2.many thanks

A question was posed by a client regarding the Cisco NAC solution. Is it possible for the cisco NAC client to co-exist with another cisco NAC client? Can you have two different versions installed on the same system?My client will be dealing with plen...

Hi,ssh connection goes from server1 to server2, between servers is  IPSec tunnel ASA1- ASA2But connection is reseted, i have tis log message on ASA1%PIX|ASA-2-106001: Inbound TCP connection denied from  IP_address/port to IP_address/port flags tcp_fl...

I have following config on FWSM and it works fine for Internet bound access.object-group network LAN network-object 10.1.1.0 255.255.255.0object-group network DMZ network-object 192.168.1.0 255.255.255.0nat (LAN) 1 0.0.0.0 0.0.0.0global (outside) 1 <...

Hi,I have a question  about the 851 router - what are it's firewall capabilities?I want to be able to use an app on a PC behind the rotuer to send out a SMTP messageto a mail server on the web but on port 80 and not 25.  Can the router be configured ...

Hey allSo i have a PIX515e running at homeI have setup all the IP's of my PC's in the IP names list, ive setup a service group for theseThe port is tcp/ 13646 and udp/13646the program connects fine (utorrent - fully legit, need more linux distros!) b...

Hi Team,We have IDSM and FWSM module installed on each Cisco switch 6500 series placed in Active/Standby mode (HSRP).We want to perform failover testing with the below scenarios for the IDSM and FWSM module1. How will the traffic flow if the IDSM mod...

HiNull session is not being detected by my IPS, I want to know which is the relevant signature so we could block this on IPS.I would apprecaite if someone can share the relevant signature....so i can block null session.RegardsNad

Hello,This week I started getting alerts from my IPS regarding the activity of some of my HP printers.  IPS is logging "1104-0 IP Localhost Source Spoof" .  I have sniffed what a few of the printers were doing and the only activity being sent to out ...

Hi,We have two sites connected via a 1Gb trunk. There is a cluster of Nokia IP530 firewalls, split between the two site. Everything was working fine until the core switches were changed out on one of the sites (went from a Cisco 4507 to Cat6500 with ...

Dear friends,I need to tidy up my ASA5520, which includes remove unused access-list, NAT etc. what is the best way to document my ruleset?Need advise on VPN, we have alot of 3rd party companies dial in, they are currently use a mixture of secure desk...