Network Security

Dear AllWe have 2 cisco asa 5510 in active passive mode . When i check the failover it shows that both one asa is in active mode and the other  is in passive mode.I am able to login to the primary firewall but not able to login to secondary . The sec...

I'm using the following script to pull out the source port from a syslog message generated by an ACL.  The intent is to grab the destination port for use later in the script:no event manager applet REDIRECTevent manager applet REDIRECTevent syslog pa...

I was able to built tunnel between L2L fallowing this example:"Add a New Tunnel or Remote Access to an Existing L2L VPN"I've tried to add other tunnel to the NY (HQ) Firewall. Is it possible to add more tunnel ?My configuration is TN, NY, and CA tunn...

I am installing a NAC solution for a customer and they don't want users to have the NAC agent in the sytem tray. Is there any way to do this because they are pretty adamant about it.

I’m going to configure (on paper) an FWSM with two contexts sharing inside and outside interfaces.I’m using one context only for admin purpose (access to the system space) and other to pass traffic.Admin and production contexts are sharing the inside...

does anybody have any hard & fast rules or 'rule of thumb' type guidlines for how big the state links have to be with an ASA 5580 running multiple contexts ?   For example as you add more contexts, you are of course firewalling more traffic --how doe...

Early today while working at a client site, I had to troubleshoot a Cisco VPN clientconnection against our ASA appliance.  I SSH'd to the ASA, then went to work setting up the following:debug crypto isadebug crypto ipsecdebug crypto engineI then woul...

I have this problem with slow performance one way copying files from one server to another.Iperf also shows this performance.Server1 is connected to a 3560 giga-port in vlan 670, and there is a 1 gig trunk to a 6509.The 6509 is configured with vrf an...

we have 2 existing vlan that are vlan10 and vlan12.how to bind the dhcp on these vlan?

i am receiving "DENY TCP (connection marked for Deletion) from 10.20.1.x/3698 to 10.17.0.23/4343 flags SYN on interface tech on my FWSMI verfied there is no rule in place that would cause this deny.We have several dns servers in the "services" vrf (s...

Helo,I'm trying to establish a vpn connection between an ASA with ios 8 and a Cisco Anyconnect client 2.4 on Windows Vista 64bits. I get the message "Unable to establish vpn connection" before the requested login data. I've trying in other pcs with t...

One Cisco PIX at datacentre(remote) and one asa5505 and one PIX 506E at my office both are creating VPN to data centre but now i need to access asa n/w from pix n/w which are in the same LAN..

Hello, I have several questions about the integration of Cisco ASA 5500 and IPS 4200 devices in my system. I tried to read everything about the subject but I have to design something quickly and I need several answers as fast as possible: Concerning ...

Hi,can someone confirm me that when I do an license upgrade from 20 to 50 contexts in a FWSM, I don't need to do a reload?Thank you.Best regards,