Network Security

Referring to the attached diagram.(sorry if the diagram is not too neat, had to sketch in a hurry).There are 2 different internet lines being used at different sites.All internet traffic from Layer3switch 2 uses that internet link. & internet 1 is us...

This could be related to a previous conversation of mine: http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40.2cd34318This has now come up:Host A ...

Hi All.I have this problem. I manage a remote datacenter network from an ASA outside interface.The same host must be accessed from outside by customers by its natted IP address (200.x.x.1) and, at same time, by staff by its real ip (10.x.x.1) “ANDâ...

We have migrated the supervisor card from III to SUP 720 on Cisco 6509.I get this error from Inventory Collection :RICS0001: Internal Error,unable to process the collected data from the device.Normally, this change should be detected and the inventor...

Hello,I have and ASA 5510 and would like to be able to access the MGMT network including the AIP-SSM module from the internal network. I am a Cisco newbie.Mgmt port: 192.168.22.1AIP SSM Mgmt port: 192.168.22.254Internal network: 192.168.1.0/24I can c...

We have a Windows 2003 server running IIS and a custom built ASP.net application on it. Before we switched to an ASA5520 we had a Watchguard Firebox appliance in front of it and all was good. After the switch to the ASA we started getting reports of ...

Hello All- I am tying to find out if I am running my PIX VPN's as efficiently as possible. Here is the setup:Our PIX 525 pair terminates about 150 VPNs from customers and sites. Some connections we control both ends (usually an 1811 on the other side...

Greetings Folks,We have a 5510 with a public IP address A and a private IP range behind if of Z.Y.Y.0/24, it also has a default route out to 1.2.3.4We also have a 1841 with a public IP address of B and a private ip range behind it of Z.0.0.0/8, it's ...

Hi all,I have 2 ASA 5510 running 8.04 in a cluster. I am looking to upgrade the software and saw the 8.05 just released.Would anyone care to elaborate as to what the major difference between the 2 upgrades are and why I should go with one over the ot...

We have activated ssl vpn on our vpn concentrator 3000 running with 4.72 version .The configuration has been done as described in the cisco website, however we are facing the following problems.... ON THE VPN CLIENT : Here we see that the client thro...

I've run into a major issue and I feel that I'm stuck and this just cannot be done...Here is the situation.I installed Windows 7 on my laptop, and installed the latest version of the Cisco VPN client 5.0.06.0110When I connect to work, I get the error...

Hi there,I'm trying to troubleshoot some traffic traversing one of my firewalls and I was hoping someone could help me. I have a TCP datastream that runs around 3Mbps and when I compare packet traces from before the firewall to after the firewall, I'...

I configured identity static NAT on my ASA specifying a range I.E. "static (inside,outside) 10.10.10.0 10.10.10.0 netmask 255.255.255.0 and now the outside users cannot connect to inside WEB server which has IP address of 10.10.10.51. Do I need to cr...

Hello1) What's the difference between promiscuous mode and inline pair pair?2) Where the necessary use of each mode?3) if I have I-BANKING server located in the DMZ network, so what mode should be prefer4)after the preferred mode then do I need to as...

Hello,I have Cisco6513 with one IDSM-2 slot.I faced the following issue:Suddenly traffic over the network became very very slow. I troubleshoot the issue so I found that IPS1 LOAD reached 100%. So via CLI, I did the IPS1 in BYPASS mode ON. Then traff...