Network Security

Hello,I have a question regarding dynamic policy NAT and IPSEC Site2Site connections.Kinda hard to explain, but I will do my best.The current setup is - two sites, site A (ASA 5520) and site B (ASA5505). Botw with FW 8.2- Both sites are connected via...

Is this possible after enabling Security Context on ASA 5510 .Requirement: Will be able to allow Dedicatedly Vlan 5 Traffic (In Red Line) to use ISP-2 to communicate outer world and Vise versa if I ...

Hi,We are running an IDSM-2 with 7.0(1)E3 and 2 virtual sensors.I want to filter alarms from sig 2004 for a monitoring server.When adding an event action filter, it still sends alarms. Bug?? Is there another way to filter the alarms for a specific ho...

Hi: CAN ANY ONE TELL ME WHY THE MAIL SERVICE IS SHOWING DOWN/STOPPED IN THE CSC-SSM MODUEL ??I HOPE THIS IS NOT BECAUSE OF THE BASE/PLUS LICENES EXPIRATION. Pls confirm me....The CSC SSM RegServer service is runningThe CSC SSM HTTP service is running...

We are trying to establish vpn connection using cisco vpn client on laptop to a vpn concentrator in a remote office. All network devices are in the same private network. There is a Cisco ASA 5505 firewall sitting between VPN client and VPN Concentrat...

Which release is the most recommended and stable for ASA5505 now?We're just leveraging ASA as a SSL-VPN gateway.Regards,Kaz

I'm trying to do some natting. My intention is to NAT a public address space (10.1.1.0 /25) subnet to a single address on my private network (192.168.1.10 /32).the intent is to get the servers in the private subnet (VLAN'd) to respond to ANY server ...

Hi, ASA 5520 with access-list on INSIDE Interface. There is trading application need by a user on LAN where ports are unknown and needs to be opened.How to identify the ports. On ACL inside if I add permit any any it works.All http traffic is not pas...

HelloI've upgraded my ASA 5510 to Version 8, and also the ASDM to 621. When I try to access via HTTPS I get "401 Unauthorized". The config looks fine, so I'm presuming it could be because IE7 possible. Any help would be great.Thanks

Hi I have received an log on my cisco vpn 3000 concentrator stating....L Internet Key Exchange (IKE) Phase-1 Denial of Service *Delinquent 2009-09-09 2009-10-09 now what do i need to do to gather more information pertaining to this DOS attack and how...

Can an ASA 5510 load balance over two ISPs (i.e. send and receive traffic over two different connections simultaneously)?I know the unit has Dual-ISP support so if one ISP fails it can re-route the traffic through the other ISP but can it utilise bot...

When running two ASAs as Active/Standby; is there a way to have two different management addresses using two different networks?(In a failure each ASA should keep its mgmt address. Basically exclude the mgmt interface from config synchronization.)Th...

Hello I have an ASA5510 which I am trying to move into production. Currently I have external, internal, and DMZ interfaces. I have a proxy setup for the inside traffic to get out. I also have a static nat for a DNS server in the DMZ zone. I would lik...

We're considering running Zone-based FW IOS on our border routers which are ASRs. We're used to ASAs with their active/standby feature. Is there an equivalent for ZFW or do we need to rely on OSPF or HSRP?