Network Security

Hi, I have a site-to-site VPN from a remote office to a HQ site. At the remote site I have an ISR 877 ADSL router(zone based firewall) and a PIX 523 (7.2) at the HQ site. The problem is I can ping and connect to anything in the HQ site. But I can onl...

I'm planning on migrating my VPN users off the VPN 3000 concentrator. There are many users logged on throughout the day. I would like to make this a graceful migration. I would like to know if there's an option to set the VPN concentrator to no longe...

Is it possible to setup ip sla to monitor specific port number? In my case port 500 or esp.

If I change ASDM to 8443, it starts just fine. Yes, I've read about WebVPN conflicts with 8.0, but I've even tried changing that to 1443. I just upgraded from 7.2(2) to 8.0(4) - worked fine on the first firewall and only this ASDM problem with the se...

Hi,Is it possible to lock down an IP-MAC-Physical Interface binding similar to using port security or IP source guard on the physical ports of the ASA 5505? This is to prevent spoofing, man in the middle attacks and the connection of unauthorised dev...

Trying to establish a tunnel with a Cisco VPN client ver 5.0.05.0290 to a remote network running a PIX515 ver 8.0(2) with asdm and the connections are not working properly. The client software is being started on a host that is behind a PIX515 ver 6...

I have this type of topology:Workstation >> Floor Switch >> Cat6513 >> ASA >> InternetMy Workstation is Vlan 123 and my ASA interface inside is Vlan 20Here is my Vlan configuration:!interface Vlan123 ip address 172.21.123.254 255.255.255.0endC6513-C...

I do make the connection, my vpn get connected but i can not ping and reach my server in my office whlie i am out of my country.Many thinks

How can I detect how long the IPSEC tunnel has been up on the router? Is there any similiar command such as "show vpn-sessiondb l2l" on the router? Thanks,

I have a ASA 5510 and I'm currently using it to serve my VPN client (ipsec) users. I want to be able to also use it for the AnyConnect client but limit who can use the client to connect. I'm authenticating my users using a Windows IAS server and I pu...

Hello,I have a client that is unable to connect via Cisco VPN IPSEC Client to a ASA. We use Certificate Authentication. Basically the client disconnects after authentication information is entered. There are no issues connecting via AnyConnect to sa...

Hi,I was just wondering about best practices when it comes to remote administration of the ASA.It appears that SSH is the best option, but the one thing that bugs me is that I would have to allow SSH access on the outside interface for all IPs since ...