Network Security

HI,we have using PIX 515E and connected a site to site vpn between headoffice and branch office In our PIX we used three interface O/S - X.X.80.5I/S - 10.195.21.X -------Vlan 5 in core switchI/S 2 - 10.195.1.X ------vlan 6 in core switchthe VPN are w...

I like the advantages of using a VTI thru my VPN. My problem is that my ASA sits in between my remote router and my core router. Is there a way to have the IPSEC VTI traffic pass thru the ASA and terminate on my core router? I have available static I...

We have numerous requirements for Secure FTP transport. Can anyone please shed any light on how you are handling that requirement with the ASA?

I am having my inside network connected to L3 switch with ip subnet of 172.21.18.0/24 & 172.21.19.0/24 . My all traffic from outside interface is blocked except some application. For last one week i am getting error message continously 6GB error mess...

Hi,customer has two version of McAfee antivirus. What I need is - user get the same role when login to PC with version X or PC with version Y. Is it possible to create AV install rule with OR logic? Something like if on PC is installed version X OR v...

Cisco document says by default traffic from higher level interface to lower level interface is always allowed. However it seems for traffic going from higher interface to lower interface, ASA always checks xlate table first. So there should always be...

Hi All, I don't have too much experience with NAC deployment. I want to go with L3 (because we have central site), OOB (for LAN) and IB (for wireless and VPN). but I don't know whether I should go with real gateway or virtual gateway. I know virtual ...

I have a ASA 5520 and would like to know how to setup NAT overload so my internal users can access the internet with the one public IP I have.

Hi, I have configured RA vpn for remote users in ASA 5520 with version 8.0(2). The vpn was working fine since yesterday but somehow it has started giving an error in the debug of the ISAKMP & IPSEC that its not able to provide an IP Address to the cl...

Hi,I would like to know if the following scenario is possible or not.There is an IPSec VPN between an ASA 5520 and another VPN device at a remote site. There is a central DHCP server in the INSIDE on the ASA. Now this ASA should release IP address to...

I have a Mail Server behind Firewall. With an ipcop firewall connected and port 25 forwarded to the mail server ip, the exchange server works perfectly.Now I have a combination of Cisco router and PIX. I cannot seem to be able to configure the pix an...

Hi,I have problem with backuping my conf through RA VPN using WRITE NET command.MYASA(config)# write net 192.168.255.1:test.txt Building configuration...Cryptochecksum: c366c4dc eaea3f0c f2f87a80 8ba48cd0 !!!!!!!!!!!!!!!!!!%Error writing tftp://192.1...