Network Security

All,While I'm very familiar with access lists, I'm not familiar at all with Zone Based Security Policies.  With that in mind, could somebody give me a verbal desciption of the default Zone Based Security Policy setup on my Cisco 881W router?  I've tr...

I am seeing this message on my syslog server that I have NO explaination for.  Perhap someone can point me to the right direction.hostA---(i)ASAVPN(o)---ASAFW---Internet---VPNc--hostBI have a site-to-site VPN between hostA and hostB between the ASA a...

I have a question about present scenario in a network where the wan connectivity is 4 GB and Lan network is 10 GB. The firewall for the WAN is cisco 5580-20 with 10 GB ethernet interface and on the LAN 6500 series switch with 10 GB ethernet module. T...

I am using Cisco NAC and recently my clients are recieving the error message that the NAC server can not be contacted but the NAC event logs are logging the following message "Invalid validation request" authentication error.  Please help!!!  Cisco T...

Guys,I have a NAC with two roles configured "Person" and "Person1" and I saw that when Person is authenticated it's put on Online users OOB and certified Devices but when Person1 is authenticated it's just appear as Online users OOB but does not appe...

Hi,We are in the process of migration some Nortel phones at various remote locations.These remote sites are not managed sites and some of them are using their own internal IP address forwarding traffic to MPLS edge router.With the PIX, using Static N...

Hi all.Can someone provide me a simple example of triggering predefined eem applets remotely ?Suppose i have 2 routers, R1 and R2. I made an applet on R2 which will be triggered remotely by R1 when some event on R1 occurs. Can someone provide me a si...

I'm using Pix 520 rev 4.2I need to enable a computer in the DMZ RDP access to computers (entire scope) behind the INSIDE interface. How can i do this?Ex. Machine (192.168.4.5/24 only) in DMZ needs to RDP into Machines (172.16.5.x/21) on the INSIDE ne...

We use Websense with our ASAI'm wanting to move Websense just inside our ASA5520 inside interface. I'm concerned that Websense's license count will increase. Anyone have a way to get an accurate count of IPs that an ASA inside interface sees?

Hi All,I have upgrade my ASA from 8.0.4 to 8.2.2 and post that ftp data traffic going over the VPN terminating on the ASA is not working,  do i need to do any configuration change for this.

We have an ASA5510 which we need send 12 Multicast through.  I am using igmp join-groups on the OUTSIDE interface so that it will forward the packets.  Occasionally we need to limit some of the groups because its private video. I have tried setting u...