Network Security

Hello,I have and ASA 5510 and would like to be able to access the MGMT network including the AIP-SSM module from the internal network. I am a Cisco newbie.Mgmt port: 192.168.22.1AIP SSM Mgmt port: 192.168.22.254Internal network: 192.168.1.0/24I can c...

We have a Windows 2003 server running IIS and a custom built ASP.net application on it. Before we switched to an ASA5520 we had a Watchguard Firebox appliance in front of it and all was good. After the switch to the ASA we started getting reports of ...

Hello All- I am tying to find out if I am running my PIX VPN's as efficiently as possible. Here is the setup:Our PIX 525 pair terminates about 150 VPNs from customers and sites. Some connections we control both ends (usually an 1811 on the other side...

Greetings Folks,We have a 5510 with a public IP address A and a private IP range behind if of Z.Y.Y.0/24, it also has a default route out to 1.2.3.4We also have a 1841 with a public IP address of B and a private ip range behind it of Z.0.0.0/8, it's ...

Hi all,I have 2 ASA 5510 running 8.04 in a cluster. I am looking to upgrade the software and saw the 8.05 just released.Would anyone care to elaborate as to what the major difference between the 2 upgrades are and why I should go with one over the ot...

We have activated ssl vpn on our vpn concentrator 3000 running with 4.72 version .The configuration has been done as described in the cisco website, however we are facing the following problems.... ON THE VPN CLIENT : Here we see that the client thro...

I've run into a major issue and I feel that I'm stuck and this just cannot be done...Here is the situation.I installed Windows 7 on my laptop, and installed the latest version of the Cisco VPN client 5.0.06.0110When I connect to work, I get the error...

Hi there,I'm trying to troubleshoot some traffic traversing one of my firewalls and I was hoping someone could help me. I have a TCP datastream that runs around 3Mbps and when I compare packet traces from before the firewall to after the firewall, I'...

I configured identity static NAT on my ASA specifying a range I.E. "static (inside,outside) 10.10.10.0 10.10.10.0 netmask 255.255.255.0 and now the outside users cannot connect to inside WEB server which has IP address of 10.10.10.51. Do I need to cr...

Hello1) What's the difference between promiscuous mode and inline pair pair?2) Where the necessary use of each mode?3) if I have I-BANKING server located in the DMZ network, so what mode should be prefer4)after the preferred mode then do I need to as...

Hello,I have Cisco6513 with one IDSM-2 slot.I faced the following issue:Suddenly traffic over the network became very very slow. I troubleshoot the issue so I found that IPS1 LOAD reached 100%. So via CLI, I did the IPS1 in BYPASS mode ON. Then traff...

2193 11/05/2009 14:17:58.610 SEV=4 AUTH/15 RPT=170 Server name = hbmaindc01, type = LDAPAUTHOR,group = none (global server), status = Not-in-service 2195 11/05/2009 14:17:58.610 SEV=4 AUTH/88 RPT=41 Authorization failed: Reason = Network errorhandle ...

Dear ALL,Issue: IDSM is showing 100% Inspection(Sensor) Load during certain periods daily which causes more than 2000 ms delay in the network.This issue occurs after upgrading the signature engine to E3We have also monitored the traffic during 100% L...

Dear Experts!We have several AIP-SSM-20s on the ASA and one of the AIP-SSM-20 has seen high cpu status one hours ago and it still going on.another AIP-SSM-20 has 2~20% cpu load.Is this normal status? Do you have same experience?I have one more questi...

Hello... here is the question...Based on the following configuration which option is correct?class-map type inspect match-all myprotocols match protocol httpmatch protocol dnspolicy-map type inspect myfwpolicy class type inspect myprotocols inspectzo...