Network Security

Hi All,I have CAS, CAM, ACS and WiSM. CAS configured as OOB Virtual IP. I need to place users in VLANs according to User Groups on Active Directory.I can configure dynamic VLAN assignment without NAC using WLC->ACS-AD scheme.But How can I configure d...

Good day,First time posting a new question.  I have many customers that have ASA in HA with Dual ssm-10 or 20s.  I want to know if anyone out there has a script already created that will,1. Connect to the IPS running on the ACTIVE ASA and pull the co...

HiGuysI have IPS 4215 with 6.0 image, 4 sensing Interfaces anlong with the C&C,i m confused a litlte bit about the sensing interfaces across the network what am thinking is as follow:IPS will be functions as inline mode1) Two sensing interfaces bridg...

Hi,    I would like to know if will be possible to have dynamic routing working into FWSM with multiple context in the future. I need this because I have two OSPF process working outside and inside de FWSM, so the FWSM should have the posibility of a...

Hello,I have the following network setup on my pix.Interface 0 is internet --static ipInterface 1 is internal  10.1.1.0 is regular computers.                                 vlan3 -- 10.1.3.0 is public internetAlso we have 2 dhcp scopes setup, one fo...

I have PIX515E Failover pair, the primary boots fine, but standby does not boot at all, no console output.If you try boot 30 times, one time it might boot up as normal, but 29 times no console output at all does not boot.IOS 8.03 running on both PIX....

Just testing RDP right now and it goes no where.  Not sure which it is either nat or acl that are messed upinterface ethernet0 autointerface ethernet1 100fullnameif ethernet0 outside security0nameif ethernet1 inside security100hostname ciscodomain-na...

Hi.i want to know that in failover of ASA 5540 ,can we use management interfase as a failover pair?

I am trying to forward tcp port 1042 from the outside port to the telnet port of a host on my inside network. The problem is that all packets are being denied by the implicit deny rule on the outside interface. I know that the access-list that I conf...

We currently receive syslogs (informational) for all connections but have recently deployed an auditing tool that requires that each ACL also be set to log. Is there a way to globally set all ACLs to log?

                       Hello Guys,                                       I am setting up the config for a send VPN and what to use an name map statement. The problem is I do not know what the 10.255.255.0 is doing and I do not want to bother the othe...

I recently installed an AIP-SSM into my ASA5510.  This enabled the IPS functions in ASDM 6.2.5, but has caused some issues.  I am running ASDM on OSX 10.6.3.  Now ASDM will hang when closing the application.  It will also hang instantly when attempti...

dear experts, helloi'd like to ask a question about how the IPS can inspect and prevent any atteck in the encrypted packets in some sessionssuch as vpn or ssh sessions, is there a technique helping forthat in the IPS?thanks alot for your helplabib ma...

We have some <other vendor> IPS and for a new implementation we bought IPS Cisco 4270, i have taken the couse of Cisco IPS and I liked how it works. But we have a big problem thats apply to our company, at different level the manager, boss and the us...

Using NAT is it possible to Port Translate 2 ports ie tcp 80 and tcp 81 back to tcp 80 on 1 ip address?ie.static (inside,outside) tcp interface 80 10.10.10.10 80 netmask 255.255.255.255 static (inside,outside) tcp interface 81 10.10.10.10 80 netmask ...