Network Security

We use ASA 5520's for firewalling and VPN. When users are connected to VPN they are unable to communicate with each other. If i remove the nat associated with the outside interface all works well and they are able to communicate. Only problem is that...

My question is not platform specific but I manage numerous ASAs and PIXes which is what I am concerned with.Generally speaking, best practices suggest using an explicit deny with logging at the end of ACLs. My question is very simple. Does this apply...

Hi There,Can i get some feedback on the new software release 8.2 for ASA firewalls. I manage two of these, one is a 5510 and the other 5520. I know that it is better to have 512MB of memory. I'd like to get stats via netflow on these firewalls. I'm w...

Hi all ! Does IPS 42xx appliance supports failover . We will propose it to a client , we are currently having ASA 5540 failover but i wana know will IPS appliance support failover or not .

Hi,I am trying to erase my Pix config which can't.I tried "wr eraze" then "wr mem" then "reload", but the old config remains.

Just wanted to know if this will work or not...I was looking at a design from a client and they had two CAM and CAS plus a Guest server. My client wants to use the equipment above for guest access. The problem I'm having is that I'm building a wirele...

I'm wondering if anyone can tell me if I'm on track with this. First let me say that I don't know the FWSM at all (I know the ASA, but not this module). I am going to be retiring two old 6500 chassis which contain 2 FWSMs running in active / standby ...

I have a new 5505 with basic license, and I setup DMZ as security 50, inside to out side no issues.restricted access from DMZ to inside (that satisfy the license limitation), but I should be able to access internet(outside) from DMZ am I corrct.But I...

Good day. We have cisco 3825 router terminating l2l ipsec vpn from about 20 remote sites. Sometimes (once - twice a week) the tunnel with random site goes down and cannot be reestablished. The strange thing is that i can't see any traces of activity ...

Hello folks.Have a query and cant seem to find an answer on the web.I have configured SSL Clientless VPN on a lab ASA5510, using 2 tunnel groups, one for enginneers and one for staff, mapped to 2 different group policies, each with different customis...

Having strange VPN/DNS problems with Vista. Cisco ASA ver 7.0 (8) & clients using the latest VPN Ipsec client. Our policy enables split tunneling. The client connects without problems but when trying to access some internal systems they are trying to...

Hi, I just to inquiry how to get the username and password for auto-updating the signature files from cisco.com.The signature files is for the IPS (SSM) module attached to the ASA. Thanks in advance.

So with the ipsec client, it was easy to distribute PCF files to folks based on what you wanted to access... different group name, different ACLs, different PCF. So in order to use that vpngroup's access, you had to have the PCF. However, with WebVPN...

Hi Guys, am trying to upgrade my ASA-SSM-20 IPS.current version: IPS-K9-6.0-6-E3but after browsing the file & clicking on upgrade button, i got this message window:"cannot upgrade software on the sensor""NULL"I used the following files after download...