Network Security

Cisco document says by default traffic from higher level interface to lower level interface is always allowed. However it seems for traffic going from higher interface to lower interface, ASA always checks xlate table first. So there should always be...

Hi All, I don't have too much experience with NAC deployment. I want to go with L3 (because we have central site), OOB (for LAN) and IB (for wireless and VPN). but I don't know whether I should go with real gateway or virtual gateway. I know virtual ...

I have a ASA 5520 and would like to know how to setup NAT overload so my internal users can access the internet with the one public IP I have.

Hi, I have configured RA vpn for remote users in ASA 5520 with version 8.0(2). The vpn was working fine since yesterday but somehow it has started giving an error in the debug of the ISAKMP & IPSEC that its not able to provide an IP Address to the cl...

Hi,I would like to know if the following scenario is possible or not.There is an IPSec VPN between an ASA 5520 and another VPN device at a remote site. There is a central DHCP server in the INSIDE on the ASA. Now this ASA should release IP address to...

I have a Mail Server behind Firewall. With an ipcop firewall connected and port 25 forwarded to the mail server ip, the exchange server works perfectly.Now I have a combination of Cisco router and PIX. I cannot seem to be able to configure the pix an...

Hi,I have problem with backuping my conf through RA VPN using WRITE NET command.MYASA(config)# write net 192.168.255.1:test.txt Building configuration...Cryptochecksum: c366c4dc eaea3f0c f2f87a80 8ba48cd0 !!!!!!!!!!!!!!!!!!%Error writing tftp://1...

Hi,I know that is possible to find Real-Time VPN Statistics in the ASDM at : Monitoring > VPN > VPN Statistics > Session -> SSL VPN Client filter by All Sessions.But, I would like to obtain a monthly summary of VPN activity. Is it possible, and how c...

Hi,I want to know if is possible create a VPN where the remote and local network be the same, and what requirements this has.Thanks

I am running an IPSec VPN tunnel between a 2801 router running the c2801-advipservicesk9-mz.124-15.T9.bin image. The other VPN endpoint is a PFSense firewall. The tunnel is established. The issue I'm having is that with the tunnel up we were not a...

Hi, i have a ASA5540-AIP20-K9 with ASA-SSM-CSC-20-K9 module, but this module is not coming up, in ASDM and for entering the license it doesn't accept old password that should be "cisco" as document says, i don't know how can i reset the module to fac...

Setting up a new DMZ on my ASA 5520 running 7.2(3). I want to allow by exception into the internal network, but allow everything out to the external network. I'm only using private addresses on the internal network. If I simply have a few permit stat...

Hello;After installing CSC SSM in ASA5520 everything works fine with the exception of updates for my cisco Ironport email appliance. The update appears to just time out and never pass 0%. Anyone had similar issues or suggestions?Tks,Adam

We have 6500 with “WS-SVC-FWM-1 6 ports Firewall Module Rev. 3.0” (FWSM Firewall Version 3.1(13) Device Manager Version 5.0(3)F) . There is a problem regarding accessing server behind this firewall. The scenario likes this: user(client) is using ...

I am having a problem with and ACL blocking SSH from the outside interface. I do not want users to SSH my router from the outside at all. Here is my ACL and the way it is applied to the interface that faces the internet.ip access-list extended OUTS...