Network Security

I have L2L connection between ASA and Cisco router. I would like to protect traffic and give full access from PIX LAN to some hosts on the cisco router sites but not inversely. How to protect the LAN network on PIX site ?I couldn't find anything on p...

Hi folks,I have a stupid question to ask. We are about to deploy a number of IPS42xx appliances. There's no free ports on the switches to connect their sensing interfaces to the switch SPAN port. Is there any way to use a pair of the sensor's interfa...

Hi,Is SNMP mac notification for switch really works with NAC OOB deployment? We have been trying to test in a POC setup for NAC where the PC with NAC agent is connected behind a Cisco and Nortel IP phones. Once the PC is disconnected behind the IP ph...

After upgrading our PIX 515E from V7.22 to V8.04 everything but one protocol seems to work fine. When trying to make an Sqlnet connection through the firewall a syslog error is kicked out: "PIX-4-507001: Terminating TCP-Proxy connection from outside:...

Hello Champs,I am using PIX-506E version 6.3(5)In order to do a scheduled config download, my script is hard coded to loginwith a user name and password and execute the show running command. However, since i have enable password configured, I am unab...

Hi all,I have a routing + NAT issue with my PIX 515 (v7.2.4).Indeed, i can't reach at the same time, my outside interface (Internet) and a subnetwork in my inside network using a router which has an ip on my inside network.here is my conf :PIX Versio...

Hi I currently struggle it implent Singel Sign on over smart-card s in an NAC inband real Ip gateway Deployment.its is working fine when the user signs in using their normal windows login but as soon as we use the smart card the agent won't login and...

Hi All, we have the following scenario. 2 Firewall Active/Standby are facing 2 routers configured with HSRP.is it possible in order to achieve LOAD Balancing for certain destination traffic to have 2 static routes having same AD but different next ho...

DHCPD is not configuring on failover FWSM. All other config is syncing between both FWSM.dhcpd address 10.27.0.10-10.27.1.9 INSIDEdhcpd lease 3600dhcpd ping_timeout 50dhcpd option 150 ip 10.27.2.10 10.27.2.11dhcpd enable INSIDEFWSM Firewall Version 4...

I am working at a client site whom wants to use his Windows Domain Controllers on his Inside interface on the ASA to Authenticate Domain users whom log into a Web Server on the DMZ interface. This Web Server in the DMZ is configured to use Active Dir...

I have been receiving the following message from ASDM when attempting to launch it"ASDM is unable to read the configuration from the ASA, Please check the configuration and connection" I was able to launch it from the ASA, why can't it connect back f...

All,We have an issue where some of the vpn clients register in DNS and some don't when connecting to a 5520. Is there an option on the 5520 that will always register for the client?We have a local pool on the asa that hands out addresses. The clients...

HiWe are in a process of starting to work on a design with several IPS 4270. The demand is to make the design redundant and with high availability. As I am aware of there no redundant support (e.g. no protocol support like HSRP) within the IPS itself...