Network Security

one of our clients has an ssl vpn setup of firewall -- ACS -- Domain database.There is a requirement that we have a fallback for authentication to vpn in case domain database is unavailable/fails.i.e. if this happens, ACS checks the domain & if it is...

Hi Guys,A basic firewall issue-network topology is as follows-R1-PIX-R2R1 config-interface Loopback 0 ip address 192.168.1.1 255.255.255.0!interface fastethernet 0/0 ip address 10.1.1.1 255.255.255.0!ip route 0.0.0.0 0.0.0.0 10.1.1.2!R2 config-interf...

Currently running IPSEC VPN on a Concentrator. We have users that use a lot of public wireless, Sprint Air Cards, and hotel networks. Most of the time the IPSEC works fine but sometimes it requires multiple connection attempts or drops which is obvi...

folksi have an asa running v8 IOS and i'm trying to allow ftp through it but its not that straightforwardthe internal client makes an outbound ftp session to an external ftp serverwhen the ftp credentials are authorised the external server responds b...

I am trying to post some examples of this type of thing so that people might be able to avoid some of the problem I run into in configuring my stuff.I have redundant 6513s. I had not up until now the FWSM so I was at a loss as to how to configure th...

Hi NetGurus,I have configured 2 contexes called backend and frontend. I have given a default route on both the contexes to reach the SVI on the 6509 switch. I am only able to reachthe SVI IP from the both context and vice versa. But i am unable to pi...

Hello,My customer needs to connect one servers system in particular DMZ, with other systems in corporate LAN. The requirement is that all LAN servers/workstations can reach the DMZ server over particular ports. In the opposige direction, this DMZ ser...

Hello, I have configured the burst rate and average rate to 20 and the average drops/sec and current drops/sec is very well below 20. But I still see the trigger count going up with the syslogmessageASA-4-%733100: [Scanning] drop rate-1 exceeded. Cur...

I know my setup is ugly. I am double NAT'ing the pix as it sits behind my linksys router. So, the linksys gave the pix an IP via DHCP. I am able to browse to the machines behind the pix locally while connected to my network on the linksys, but unable...

Hi,I'm trying to query a mib for the asa to show me what IP peer is connected on a tunnel.When I do a mib walk on the 5510 8.2(1) none of the OID'S for these values show up, although they should be supported.Ie cikepeerentry or crasusername OIDs.I wo...

Hi, Can anyone tell me how to setup automatic VPN failover using 2 seperate ISP circuits. Eg, Our Local office has 2 different internet lines conneced to an ASA5510. we VPN from this office to all other remote locations. All traffic originates here. ...

I am experiencing a high amout of underrun packet drops for egress traffic out my inside interface on a ASA 5520 (avg 10 packet drops p/sec).  I am not completely clear on the understanding of underruns, but my understanding is that the harware is wo...