Network Security

I am attempting to preform AAA and certificate authentication for a specific profile for AnyConnect clients hitting my ASA5550. I am running 8.2 and have everything working except when I turn on the certificate matching. I am wondering if certificate...

I have a pix501 and my clients Clinic. I am authorized to make offsite backup per HIPPA Reg's. I have no issues connecting to the clinic and doing Remote Desktop to my server, but when I try to access the Shares to do my backups I get resource not f...

Hi,we are using the PIX 515E in our network with differenent version of IOS 6.3,7.0 and 7.2sometimes we are getting some unwanted packets through the IPSEC VPN established between our branch office which increaases the CPU load on my PIXcan any one s...

I am reading this cisco documentation http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml and I have this question regarding Lan-based stateful failover Active/Standby:According to the documentat...

Hi all I am trying two solutions for getting "traceroute" across ASA to work. First solution is working for me but the second solution is not working.Am I missing something? Solution 1 Allowing the "time-exceeded" and "unreachable" to outside interf...

Hi. My site-to-site VPN between the head office ASA5510 and remote site Linksys ADSL2 Gateway (AG241v2) is unstable. It connects OK and stays connected for a few days but then goes down and wont come back until I remotely log onto the AG241 and recon...

Hi GuysCan anybody highlight, whether CSM 3.2.2 supports multiple Domains or Groups. In Juniper NSM (Netscreen Security Manager), there is option to create Domain and sub-domain. Both have their own Objects and policies, that means Global domain has ...

Dear All,using the ASA 5510, how can I make an access list to be applied only on some client if they wants to open a specific website?Now I have this ACL:access-list testacl extended permit tcp 192.168.121.11 anybut this will be applied on ALL the tr...

Our 5510 switched to the standby unit 2 weeks ago, and since then, I have not been able to get the primary back online. The configs are identical line for line however when the primary is put back into service, dns requests from the internl servers a...

Dear Experts,I want to pass the traffic coming to the inside interface in the ASA firewall to an outside interface with the same IPs witout any Nating.Example: if traffic is coming to the Inside interface with IP: 192.168.1.11, I want this traffic be...

Dear Experts,I'm a newbie to the ASA Firewall and I want to use only one Interface,can I set two IPs for the same interface or can I use Sub-Interfaces?

Hi Guys,I am having some problem accessing the pix via console. Normally I use ssh to connect to the pix. But yesterday i was at customer site and I was trying to access the pix via console but was not successful. There are no tacacs configured and I...

We have enabled urlfilter in our office, blocking specific sites. Some users we need to exempt ffrom this blocking. Is there a way to specify IP addresses that are not affected by the urlfilter?Thanks for any help!