Network Security

Hi there,I have an issue with 2 routers (800 Series), they are configured as VPN endpoints (IPSec) and also as Internet Gateways (NAT & Inspect Rules).VPN tunnels are on a site-to-site topology (working fine). I am running VoIP on both sides with 2 A...

I've had a NAC Framework test environment (ACS 4.0 & CTA 2.1) for a couple of years now. We finally have the green light to move forward into production so I'm bringing more machines into the lab for additional testing.I went to download the CTA agai...

Just last week, when I logged into my VPN, the internet stopped working, I can't connect to remote drives, and Microsoft Outlook can't download emails from our Exchange server. Does anyone know what caused this and is there a solution? Thanks

Folks, When I import a config for a router from a notpad file and try to push it to a device, it automatically shutsdown the interface??? I made sure I put a no shut on all interfaces in the config file before importing it too csm, but when csm...

Folks, I am having difficulty working with CSM in workflow mode, has anyone done this task before, Any help would be highly appreciated. I will surely rate this post.Thanks,

Hi,We have a ASA box with the following interface configuration.interface GigabitEthernet0/1 nameif EXT_CR1_41 security-level 50 ip address 10.52.237.246 255.255.255.248!interface GigabitEthernet0/3 nameif ASA_OC_40 security-level 100 ip address 10.5...

Hi all,I got a question about active/failover with two ASA5520. Design:The active one has a CSC module (Contentfiltering), the second one without.When a fallback occures, can the second ASA handle the traffic without the CSC module.Thanks,Norbert

Guy's, can any one shed some light on this please?I am trying to replace a gnat box with a cisco PIX but it would appear that the Pix can not perform what the Gnat Box does.We have PAT mapping multiple different external/translate ports to the same s...

HiI have a PIX 506E with 6.3(5) and wanted to know if I can configure VPN client with group and user authentications. I know I can configure just group authentication so users dont have to use the password everytime they try to connect. However I am ...

Hi,Can some one plz help regarding configuration of redundant Ipsec Tunnel over EIGRP. Currently all remote sites are connected with ipsec tunnel. How can i connect all remote sites auto with DR after down of DC(Priamry Tunnel).Regards

I have basic threat detection turned on on a 5520 running 8.0(4) software. This is showing a number of "scanning" attacks. From the "sh threat-detection scanning-threat" command I can see the Targets and Attackers, but I would like more details. I...

Hi allI am trying to establish a capture and I want to exclude passive FTP traffic from the capture. The problem is that in passive ftp the control session is well defined and there is no problem excluding it from the capture.But the data session is ...

I'm about to implement static-route tracking with the below setup:interface Vlan1 nameif inside security-level 100 ip address 192.168.2.1 255.255.255.0 !interface Vlan2 nameif outside security-level 0 ip address 6.2.8.138 255.255.255.248 !interface V...

Hi,I have a ASA5505 with a security plus license that has been 'in-production' for some time but I am experiencing a 'lock-out' of a particular IP address in a DMZ with minimal usage. This IP address is configured with ACL and NAT to allow:http traff...