Network Security

Dear All Expert,Did you know ASA 5505 it has idle connection or not? ( i mean if i do VPN site to site when i don't do send any packet to source to destination the connection it will idle or not ?if it will idle, which command that we can disable idl...

If an ASA has lan failover and statefull crossover-cables connected without an intermediate switch. If one ASA goes down the other asa senses two links are down, will this be an issue ? In the cisco the second edition of the firewall handbook it is a...

Hi, I'm trying to configure ZBF on a 2811 router with a site-to-site VPN with GRE Tunnel. But, when I configure the Firewall, the tunnel stops. I've tryed adding several protocols like isakmp but it doesnt' work. Does anybody know which protocol to a...

Hi,Anyone of you know the part number for the ASA 5520 FIREWALL mounting kit. I need to mount it on the rack but unfortunately the customer forget to bring the clamp for the ASA. They wants us to order the new kit for it.swami

what would the be side of effects of setting 'timeout conn' to 5hrs? beside the possibly of running out of connection resources. anything security related?i have a client that as a web base report that takes 5 hours to run. things where fine when th...

I'm using VPN client - version 5.0.03.0530. I don't have access to the VPN server configuration.The soft set the default route of my windows xp through the VPN once established. This is a problem since I can't read my mails (hosted on a local server)...

Inside = 10.10.10.0/24DMZ = 10.10.20.0/24Outside interface of ASA5520 = 66.66.66.25DMZ host 10.10.20.50 has a 1-to-1 NAT translation with 66.66.66.27Everythis is fine except that after the DMZ host 10.10.20.50 was configured to have a 1-to-1 NAT tran...

Our VPN clients are able to access all other network resources except those with a static NAT translation on the same router that controls client connections.

I have an ASA with the SSM IPS module in it. I must be doing something wrong because all of my events are showing my internal addresses as attackers and the external addresses as the victims. We do have citrix servers that we use and so I am gettin...

Has anyone ever implemented VRF routing within IPSEC VPN tunnels on an ASA 5580? Thanks,-Alonzo

Hey guys,I have two 6500's with FWSM's. The 6500's have a VPN connection from each to a PIX for VPN between two sites. The route out of the FWSM is the HSRP of the two 6500's so while both connections are up there's no problem. However, if one VPN...

Hi all,I got a problem in the firewall network. One of the inside servers got virus and generated a huge TCP connections with other unknown hosts outside. Eventually, it depleted the connection resource and made the ASA5520 frozen. I had to disconnec...

I generate the cert request from NAC CAM and give the file to the customer. Then customer give me back several file including "CAM.key, CAM.crt and CAM_DigiCertCA.crt".When I import to the NAC, it fail and got the message "Must include end entity cer...

I have ASA 5510's that authenticate users to the Active Directory. Is there a way to prevent users, that even though they are validated through the AD from being to establish a VPN connection?