Network Security

When using downloadable ACLs it is my understanding that you specify a source address of "any" to represent the IP of the host authenticating to the FW. Is this true?Assuming this is true, what would happen if you specified a host address in the dow...

HI,I am facing a problem in Site to Site VPN.There is only an IPSEC VPN between 2 sites where all LAN to LAN traffic (TCP and UDP) is included in the CRYPTO ACL.Also note that there is a GRE Tunnel between the 2 sites, on which the Crypto map is app...

Hi,I need to allow a range of public ips to access our server on port 8881. I am stuck on how to add a pool to it.Public IP xxx.xxx.xxx.190Private IP server: 10.1.10.10Range of publics IPs to allow: xxx.70.8.125 - xxx.70.8.146So far I've done this:St...

Ok i have heard different stories on this. At first I heard Trend makes these and is the reason for the licensing in the past few years. Another internal source tells me that cisco has a signature creation group/committee internally that creates thes...

Hello,I'm trying to allow traffic between 2 VLAN's/sub interfaces on my ASA, the both have their security Level set at 25.  At the moment I can't even ping devices between the 2 and my access lists are wide open.  I raised one of the security groups ...

Capacity planning for interchassis links is an important part of VSS deployment. Include capacity for FWSM failover pairs to account for failover/state VLAN links between the two chassis if FWSM interchassis failover is deployed. It is recommended to...

Hi All,I have a cisco asa 5520 with a cisco 3750 Switch.   Few VLANs as I have many public ip address and private ip address 192.168.1.x.ACL is any any permit on all the interface.I applied interface NAT (PAT)  from private vlan to outside and public...

Hi there,I have 1 CAS and 1 CAM. Everything works fine if I use localDB authentication.I tried to complete SSO AD configuration, from CAM installation guide. SSO service started to work successful. I'm trying to login to the domain - It's ok, I see g...

I have an issue with the fact that my PIX is nat'ing my network correctly.  However, every so often I get an issue where the network we are accessing via the NAT'ed addresses stops responding.  We use alot of web based apps so we will recieve a page ...

The problem is to scan a network Ip range from an anonymous host and determine what type of devices residing on that network. Here are some device criteria:1) May be Cisco, 3com, HP, etc. Device manufacturer is unknown2) Device might be firewall, swi...