Network Security

I was able to built tunnel between L2L fallowing this example:"Add a New Tunnel or Remote Access to an Existing L2L VPN"I've tried to add other tunnel to the NY (HQ) Firewall. Is it possible to add more tunnel ?My configuration is TN, NY, and CA tunn...

I am installing a NAC solution for a customer and they don't want users to have the NAC agent in the sytem tray. Is there any way to do this because they are pretty adamant about it.

rboersma 12.00 /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt...

does anybody have any hard & fast rules or 'rule of thumb' type guidlines for how big the state links have to be with an ASA 5580 running multiple contexts ?   For example as you add more contexts, you are of course firewalling more traffic --how doe...

Early today while working at a client site, I had to troubleshoot a Cisco VPN clientconnection against our ASA appliance.  I SSH'd to the ASA, then went to work setting up the following:debug crypto isadebug crypto ipsecdebug crypto engineI then woul...

I have this problem with slow performance one way copying files from one server to another.Iperf also shows this performance.Server1 is connected to a 3560 giga-port in vlan 670, and there is a 1 gig trunk to a 6509.The 6509 is configured with vrf an...

we have 2 existing vlan that are vlan10 and vlan12.how to bind the dhcp on these vlan?

i am receiving "DENY TCP (connection marked for Deletion) from 10.20.1.x/3698 to 10.17.0.23/4343 flags SYN on interface tech on my FWSMI verfied there is no rule in place that would cause this deny.We have several dns servers in the "services" vrf (s...

Helo,I'm trying to establish a vpn connection between an ASA with ios 8 and a Cisco Anyconnect client 2.4 on Windows Vista 64bits. I get the message "Unable to establish vpn connection" before the requested login data. I've trying in other pcs with t...

One Cisco PIX at datacentre(remote) and one asa5505 and one PIX 506E at my office both are creating VPN to data centre but now i need to access asa n/w from pix n/w which are in the same LAN..

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Tableau Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin:0cm; mso-para-margin-...

Hi,can someone confirm me that when I do an license upgrade from 20 to 50 contexts in a FWSM, I don't need to do a reload?Thank you.Best regards,

Hi Experts,I am asked to configure FWSM active / passive mode. Also the requirement is to configure the switchover time to as minimum that when I ping from aDESKTOP PC of one zone to another Zone, I should not get not even single request timeout.I co...

Is there any way, maybe through LUA script to check for membership in nested groups?IE a user is directly a memeber of "Location Employees""Location Employees" is a memeber of  "Company Employees"Making the rule allow anyone that is a member of "Comp...