Network Security

Looking for a URL filtering solution. I currently have an ASA5520 as our main firewall. Looking to intergrate Websense and I have a few questions. - One real requirement from our security guys is the need for authentication in the logs. Essentially t...

I have a 5550 with 10 sub-interfaces (vlans) configured on Five physical Interfaces. Each sub-interface has a different security level based on function. I've noticed that I only have to write an egress rule for traffic to pass from a lower securit...

I have a L2L tunnel setup with a customer where we access a web based application. To get to the app, we PAT the traffic from our inside interface before sending it to them. I need to extend access to users who are sitting at another site on another ...

I moved Clean Access Manager from VMWare ESX 3.5 to VMWare vsphere 4.0. After moving the server Clean Access manager authentication and management web-site stopped working. When i go to CAM web site i get following errors(compelete error page as atta...

HI,we have using PIX 515E and connected a site to site vpn between headoffice and branch office In our PIX we used three interface O/S - X.X.80.5I/S - 10.195.21.X -------Vlan 5 in core switchI/S 2 - 10.195.1.X ------vlan 6 in core switchthe VPN are w...

I like the advantages of using a VTI thru my VPN. My problem is that my ASA sits in between my remote router and my core router. Is there a way to have the IPSEC VTI traffic pass thru the ASA and terminate on my core router? I have available stati...

We have numerous requirements for Secure FTP transport. Can anyone please shed any light on how you are handling that requirement with the ASA?

I am having my inside network connected to L3 switch with ip subnet of 172.21.18.0/24 & 172.21.19.0/24 . My all traffic from outside interface is blocked except some application. For last one week i am getting error message continously 6GB error mess...

Hi,customer has two version of McAfee antivirus. What I need is - user get the same role when login to PC with version X or PC with version Y. Is it possible to create AV install rule with OR logic? Something like if on PC is installed version X OR v...

Cisco document says by default traffic from higher level interface to lower level interface is always allowed. However it seems for traffic going from higher interface to lower interface, ASA always checks xlate table first. So there should always be...

Hi All, I don't have too much experience with NAC deployment. I want to go with L3 (because we have central site), OOB (for LAN) and IB (for wireless and VPN). but I don't know whether I should go with real gateway or virtual gateway. I know virtual ...