Network Security

Resolved! Allowing Traffic between vlan asa 5505

I have an asa 5505 with the security plus license. I have three subnets, 10.1.10.0(inside lan), 10.2.10.0(server lan), and 10.3.10.0(dmz). I need to be able to allow traffic between the server lan and the inside lan. I cannot even ping between th...

ISA client connectivity problem over IPSEC L2L VPN

HI,I am facing a problem in Site to Site VPN.There is only an IPSEC VPN between 2 sites where all LAN to LAN traffic (TCP and UDP) is included in the CRYPTO ACL.Also note that there is a GRE Tunnel between the 2 sites, on which the Crypto map is app...

Resolved! Is there an alternative to integrate NAC Appliance and Active Directory on Windows 2008 64 bits

I am trying to integrate a NAC appliance solution in a network where all the domian servers and almost all the aplications servers are Windows 2008 64 bits.Could someone help me to confirm if Active Directory (AD) on Windows 2008 is not supported, an...

ASA 5505 allow a range of public IPs to access a web server

Hi,I need to allow a range of public ips to access our server on port 8881. I am stuck on how to add a pool to it.Public IP xxx.xxx.xxx.190Private IP server: 10.1.10.10Range of publics IPs to allow: xxx.70.8.125 - xxx.70.8.146So far I've done this:St...

Resolved! Help needed with RDP on ASA 5505

I recently swapped a PIX 501 out with an ASA 5505. The configuration's are as identical as they can be. RDP (TCP port 3389) from outside the network worked on the PIX 501, now that the ASA is in place, RDP (TCP port 3389) from the outside does not ...

IPS Signatures - Where do they come from and how are they enforced?

Ok i have heard different stories on this. At first I heard Trend makes these and is the reason for the licensing in the past few years. Another internal source tells me that cisco has a signature creation group/committee internally that creates thes...

Resolved! Cisco ASA VPN QoS

HiDoes the ASA copy the ToS byte from the original packet into the newly created IP header of an encrypted packet (VPN)? I'd appreciate a pointer to a Cisco doc that has the details.Thanks

Security levels on ASA

Hello,I'm trying to allow traffic between 2 VLAN's/sub interfaces on my ASA, the both have their security Level set at 25. At the moment I can't even ping devices between the 2 and my access lists are wide open. I raised one of the security groups ...

FWSM on VSS, interchassis link.

Capacity planning for interchassis links is an important part of VSS deployment. Include capacity for FWSM failover pairs to account for failover/state VLAN links between the two chassis if FWSM interchassis failover is deployed. It is recommended to...

PIX8 Public VLAN and private Vlan problem.

Hi All,I have a cisco asa 5520 with a cisco 3750 Switch. Few VLANs as I have many public ip address and private ip address 192.168.1.x.ACL is any any permit on all the interface.I applied interface NAT (PAT) from private vlan to outside and public...

NAC ADSSO doesn't work

Hi there,I have 1 CAS and 1 CAM. Everything works fine if I use localDB authentication.I tried to complete SSO AD configuration, from CAM installation guide. SSO service started to work successful. I'm trying to login to the domain - It's ok, I see g...

NAT's not working after idle, or in middle of session

I have an issue with the fact that my PIX is nat'ing my network correctly. However, every so often I get an issue where the network we are accessing via the NAT'ed addresses stops responding. We use alot of web based apps so we will recieve a page ...

Best anonymous scan utility to determine network device/OS type

The problem is to scan a network Ip range from an anonymous host and determine what type of devices residing on that network. Here are some device criteria:1) May be Cisco, 3com, HP, etc. Device manufacturer is unknown2) Device might be firewall, swi...

Resolved! Multiple NAT from Inside Network

Hello all,I need some expert help on this issue. We currently have a setup where our pix 515e v7.2 handles out outbound/inbound internet traffic in addition to controlling access to our client's network setup via a p2p T1. The T1 internally termina...

S2S VPN Tunnel

hi all,How can we check particular S2S VPN tunnel is up from how much time (what is the up time of S2S VPN tunnel) in ASA firewall.thanx in advancergrds,Naveen

Network Security

Forum Posts

Resolved! Allowing Traffic between vlan asa 5505

ISA client connectivity problem over IPSEC L2L VPN

Resolved! Is there an alternative to integrate NAC Appliance and Active Directory on Windows 2008 64 bits

ASA 5505 allow a range of public IPs to access a web server

Resolved! Help needed with RDP on ASA 5505

IPS Signatures - Where do they come from and how are they enforced?

Resolved! Cisco ASA VPN QoS

Security levels on ASA

FWSM on VSS, interchassis link.

PIX8 Public VLAN and private Vlan problem.

NAC ADSSO doesn't work

NAT's not working after idle, or in middle of session

Best anonymous scan utility to determine network device/OS type

Resolved! Multiple NAT from Inside Network

S2S VPN Tunnel

Cyber Vision Sensor version

FTD 7.2.5.1 → 7.6.2 Upgrade sftunnel TLS Failure — Certificate Mismatc

Suppress Closed Responses on Non Existent TCP/UDP Ports

FMC Upgrade to > 7.4 || 7.6

(SNA) Changing Actions associated to Rules within Response Mangagement

FTD 4110 Generating Troubleshoot file - fails firewall

Cisco FirePower force HA failover to secondary FTD using vFMC 7.6.2

Upgrade FTD A-A Cluster via FMC Cluster

Firewall update error - user: 'admin' cannot be created, name is user.

Routing on Site to Site Policy Base VPN