Network Security

I'm working about a solution in-band.The topology is INET(untrust)-Router-CAS-SW_level3-CAM and servers(trust).My problem is that the users in untrust network have access to the trust network, they don't authenticate and don't apply any rule. The end...

ciscoasa# packet-tracer input dmz3 icmp 17.50.1.21 0 8 172.20.1.53 detPhase: 1Type: FLOW-LOOKUPSubtype: Result: ALLOWConfig:Additional Information:Found no matching flow, creating a new flowPhase: 2Type: UN-NATSubtype: staticResult: ALLOWConfig:stati...

Can we have policy to allow any version of Antivirus Software for Eg Evualuation version (License or Trial Version) with AV update to allow in the network.Can We have Remidiation Server to update the Endpoint after Authenticating a user Instead of Go...

Hi all. I intend to upgrade my asa 5510 to version 8.2(1) with asdm 6.2(1). From cisco url(http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.html#wp310503) i found that the memory requirement for flash ram is 512MB. But my asa ...

Hello, I'm implementing a Cisco clean access solution (Out-of-band VG).I've entred the license in the CAM after getting it from Cisco by entering the PAK number.the problem is that I don't see the Switch management Tab in the menu, also when I want t...

Do the connection timeout settings apply to connections traversing a transparent ASA firewall?

Hi experts,Do anyone know that how nat affect the performance (speed)? As I found that the response is slower when I am setting nat at the PIX/ASA. Here is my situration:Server <=> PIX <=> ClientTesting with a tcp streaming server:1. Without setting ...

Dear friends my name is kamil and i am new in firewall configuration.please help me with configuration in asa access from dmz to inside interface and access from inside to dmz interface.here is attachment of my configuration.i want to ping from insid...

Hi all, I have configured my Cisco 877 as a SSL VPN Gateway. I can connect to it when I have set the login method as local, however, when I change it to RADIUS I am no longer able to connect.I have also enabled RADIUS for Telnet and SSH and it does w...

I have an ASA 5520 on which I've enabled EIGRP. There are two routers to which it is a neighbor and these have equal cost distance to a network across the network. The network will automatically load-balance but the default is on a per destination ba...

We have a VPN 3005 Concentrator. The user is running VPN client 5.0.03.0560. The user was able to login to Cisco VPN client successfully. However, he cannot access the share drive or the Mainframe. When he tried to open the share drive (ip addres...

If you want to manage a transparent firewall that resides in a different VLAN/IP subnet do you just add a route to the transparent firewall back to the managing host?