Network Security

Hello, I am hoping someone can help w/configuring a ASA5510. I am wanting to limit FTP traffic. We have an MPLS connetion consisting of 6 T1's. I would like to limit FTP traffic from the internet to 1 of theses T1's. I don't care about people...

What are the pro/cons to using Easyvpn in network-extention mode with split-tunneling as opposed to using a regular site-to-site vpn connection. We have about 70 remote offices with Pix 501s already setup with site-to-site and will be replaceing the...

Hello folks - Does anyone have a recommendation based on their experience what Syslog tool works best in an all Cisco environment? I need to collect logs from all kinds of devices such as routers, firewalls and switches. I downloaded a few trial vers...

hi, how can you tell the reason why the ASA rebooted. i have checked the crashinfo but couldn't get anything out of it, should i turn on a specific logging for next time it happens or a debug ? Thank you

Hi,can anyone say which one is better, to use acl on interfaces and apply them inbound, or outbound. i mean there are 2 strategies here , you can apply on all your interfaces inbound ACL and permit from each interface, or you can permit outbound to e...

Is it possible to setup two websense servers under "Configuration > Firewall > URL Filtering Servers" and filter traffic for different vlans to the different servers?For example, dmz traffic logged to one websense server while main network traffic is...

We have Primary PIX515 with Unrestricted License and Standby PIX515 with just Failover license in Active / Standby mode.A few days ago the Failover unit failed hardware wise.We raised an RMA and got a spare from Cisco which happen to come with with c...

Hi Team,We have fwsms in cluster mode, when we configure a new acl and press enter the cpu goes high and comes down during day time (peak hrs). When we do the same during off peak hrs no problem. FWSM Firewall Version 2.3(2)5.FWSM has fairly good amo...

Hi guys,I enabled Unicast RPF to protect my network of malicious traffic. How you can see on output of command "show ip verify statistics", show dropped packets on output interface and I would like to investigat to determine their source and whether ...

Hi,I am trying to setup a l2l VPN between an ASA 5510 (os is 8.0(4)) and a PIX 515E.Then vpn fails with the following messages :ASA (initiator): ASA(config)# Aug 26 11:56:54 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, construct_ipsec_delete(): No SPI to ...

Hi,We have a IDSM-2 system card in 6500 system. Unfortunately, we lost tracking the login/password. I have read Cisco doc# 13837. It req to know either admin username/password or service username/password to do password recovery. I do not have those ...

Hello.I have a dedicated fibre connection between 2 of our primary sites with direct routing between the firewalls at the edge of each site.Each site also has an ADSL connection for emergency internet, which I have connected to the firewalls with a f...

I am trying to establish a L2L VPN connection between a Cisco877 (spoke) and a Fortinet firewall (hub). The attached files show Cisco 877 current configuration and the result from a debug generated when I ran a test VPN with SDM application.My first ...