Network Security

I have an 1811 with an old cfg on it. i want to update it to use zone based rules.However the SDM is telling me that the legacy firewall is in place, and I need to remove them.i am a security nad routing newbie. Can some one point me in the right dir...

The problem is the private ip address is showing up in the uri at the destination so when the SIP server replies to the request it is trying to send it to the private address rather than the public address.If the static (inside,outside) 64.200.111.11...

Hi, I have 2 ASA 5520 working in a statefull Active/Failover mode connected to two different routers which are working in HSRP. Now the routers are always taking a Active Active state as the HSRP heartbeats and communications are getting blocked by ...

I am currently running v8.0(3)and device manager v6.0(3) and wondering if there are more recent release of the software. The reason being I run a mixed environment composed of both ASAs and PIXs and concerned about running a higher version of ASDM t...

Good afternoon I have a firewall with three interfaces (outside, inside "172.16.0.0/16" and dmz "10.1.1.0/24") and I need access from inside network to internet on port 80 as access-list below. access-list inside_access_in extended permit tcp host 17...

The following websites states pre-shared keys can't be used to establish an ipsec L2TP, instead a PKI has to be in place and certificates must be used. Is this still the case for 2003 and 2008?

I am attempting to preform AAA and certificate authentication for a specific profile for AnyConnect clients hitting my ASA5550. I am running 8.2 and have everything working except when I turn on the certificate matching. I am wondering if certificate...

I have a pix501 and my clients Clinic. I am authorized to make offsite backup per HIPPA Reg's. I have no issues connecting to the clinic and doing Remote Desktop to my server, but when I try to access the Shares to do my backups I get resource not f...

Hi,we are using the PIX 515E in our network with differenent version of IOS 6.3,7.0 and 7.2sometimes we are getting some unwanted packets through the IPSEC VPN established between our branch office which increaases the CPU load on my PIXcan any one s...

I am reading this cisco documentation http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml and I have this question regarding Lan-based stateful failover Active/Standby:According to the documentat...

Hi all I am trying two solutions for getting "traceroute" across ASA to work. First solution is working for me but the second solution is not working.Am I missing something? Solution 1 Allowing the "time-exceeded" and "unreachable" to outside interf...

Hi. My site-to-site VPN between the head office ASA5510 and remote site Linksys ADSL2 Gateway (AG241v2) is unstable. It connects OK and stays connected for a few days but then goes down and wont come back until I remotely log onto the AG241 and recon...