Network Security

I have a client with the Cisco ASA SSM 10 module that is blocking roaming profiles from loading correctly. The issue goes away when the IPS is disabled. After I re-enable the IPS, it stops working and I see the following message in the log file:4 S...

ASA55xxxI understand how to configure redundant/backup ISP connection using static route tracking.How do you accomplish this with a dynamic next-hop route on the backup connection such as with cheap DSL?Thx - Phil

I currently have a couple public servers on our internal network and i'm using the new Public Server option in ASA 8.2. What i have done is created a new interface on my asa called DMZ with sub interfaces in addtion to my current Inside and Outside. ...

Hi GuysAttached diagram represent my planned lab setup in which VLAN 80 will be the outside interface configured with Public IPs. (2.2.2.0/28). 2.2.2.1 will be the VIP (HSRP) ip of the router interface and 2.2.2.2 & .3 will be configured on the route...

All,I have a Cisco ASA 5510 with an IPS module in it. When trying to connect to this unit with ASDM on port 8443 I get an error "Certification Validation Error" and on the popup it is asking for the password. I put in the enable password and then it ...

CISCO Expert,right now!my polycom video unit is behind ASA 5510(Version 7.2(4) )and i just use static command to binding this unit to a global address,But I found that the POLYCOM Video unit not work with another POLYCOM device to establish normal d...

I'm running code 8.2(1) on both devices I can confirm that the problem is reproducible I can restore telnet and ssh access by removing and re-adding the relevant lines in in the config (via the ADSM CLI interface)e.g.: no telnet <subnet> <mask> INSID...

Hi Guys,I am confused about the use of the static command on the PIX. Let says you have the following command on the pix:static (inside,Smtp_DMZ) 10.150.243.243 10.150.250.10 netmask 255.255.255.255 What does it meanDoes it mean anything from inside ...

Hi Experts,I want to configure NAC appliance in INBAND-CENTRAL DEPLOYMENT-REAL IP GATEWAY.In this scenario, my clients are in different VLANs say 2 & 3. To all my clients the default gateway should be the IP Address of NAC. Correct?Where I will confi...

Do I need two statements to disable nat between the inside and dmz networks, one for each interface?

Hi,I've migrated from cisco 1721 to 1841.This router has 2 adsl wics(1wic 1hwic) and one lan interface with 2 lan addess configured. Behind the router is a firewall.See the attached file.This firewall enables a tunnel, because of this there is no vp...

What happen to the running config of the pix if I used the password recovery tool? Will the current config stay saved?Please advise

I have an ASA 5505 with a T1 (outside, 1.1.1.1) as the primary route, then a DSL line (backup, 2.2.2.2) as secondary, all with LAN (inside, 192.168.1.1).Right now it successfully injects the backup route if the outside goes down, then switches back o...