Network Security

I would like to issue TCP resets thru promiscuous interface of cisco IPS 4240. As per the current setup (which is explained in the attached drawing) there is only one vlan between firewall and switch and its working fine with following configurations...

Greetings,Currently my customer has a L2 OOB VGM deployment for the users inside the campus network.The customer is opening new branch offices and wants to use the same NAC server for those office (NAC centrally deployed).I would like to get some exa...

HelloSomebody knows if there is a problem with the traffic or services on the internet when i add two route defaults with the same metric doing load balancing for each packet on the ASA5520??This is the configuration that i have added on the Firewall...

hi, I have been noticing this issue of the ASA not able to assign ip address to the RA VPN clients from its local pool. The same config used to work without any issues but suddenly it has stopped working. Earlier also I faced the same issue but got i...

Dear All Expert,Did you know ASA 5505 it has idle connection or not? ( i mean if i do VPN site to site when i don't do send any packet to source to destination the connection it will idle or not ?if it will idle, which command that we can disable idl...

If an ASA has lan failover and statefull crossover-cables connected without an intermediate switch. If one ASA goes down the other asa senses two links are down, will this be an issue ? In the cisco the second edition of the firewall handbook it is a...

Hi, I'm trying to configure ZBF on a 2811 router with a site-to-site VPN with GRE Tunnel. But, when I configure the Firewall, the tunnel stops. I've tryed adding several protocols like isakmp but it doesnt' work. Does anybody know which protocol to a...

Hi,Anyone of you know the part number for the ASA 5520 FIREWALL mounting kit. I need to mount it on the rack but unfortunately the customer forget to bring the clamp for the ASA. They wants us to order the new kit for it.swami

what would the be side of effects of setting 'timeout conn' to 5hrs? beside the possibly of running out of connection resources. anything security related?i have a client that as a web base report that takes 5 hours to run. things where fine when the...

I'm using VPN client - version 5.0.03.0530. I don't have access to the VPN server configuration.The soft set the default route of my windows xp through the VPN once established. This is a problem since I can't read my mails (hosted on a local server)...

Inside = 10.10.10.0/24DMZ = 10.10.20.0/24Outside interface of ASA5520 = 66.66.66.25DMZ host 10.10.20.50 has a 1-to-1 NAT translation with 66.66.66.27Everythis is fine except that after the DMZ host 10.10.20.50 was configured to have a 1-to-1 NAT tran...

Our VPN clients are able to access all other network resources except those with a static NAT translation on the same router that controls client connections.

I have an ASA with the SSM IPS module in it. I must be doing something wrong because all of my events are showing my internal addresses as attackers and the external addresses as the victims. We do have citrix servers that we use and so I am getting ...