Network Security

I have a Cisco ASA 5505 device deployed at a client office. I am trying to set it up so that the VPN connections are authenticated to Active Directory. I have successfully setup IAS and the users can connect using the Cisco VPN client, but when they ...

I have a pair of ASA5520 units at the remote end of a site to site VPN tunnel.I have an NMS package managing/monitoring all of my devices at the remote end, including the ASA units themselves. However, although I can get access to and reports from th...

Hi all,I've read few old post about the redirect of 80 443 to a server-proxy with wccp. This solution is the only to forward port ? I think exists a more simple solution to forward a port, does it exists ?For example how could I do to forward the 22 ...

Hi,i've got a question concerning the WebVPN feature of the ASA 5520. In our setup there is an outside interface and an inside interface. WebVPN is enabled on the outside interface and clients can connect there via browser on the portal site of the A...

Hi, I have a cisco 2811 connected by vpn to a sonic firewall. On several occasions the connection is down. In the log of the Cisco 2811 i get the following error:%CRYPTO-6-IKMP_NOT_ENCRYPTED: IKE packet from xxx.xxx.xxx.xxx was not encrypted and it s...

I have an 1811 with an old cfg on it. i want to update it to use zone based rules.However the SDM is telling me that the legacy firewall is in place, and I need to remove them.i am a security nad routing newbie. Can some one point me in the right dir...

The problem is the private ip address is showing up in the uri at the destination so when the SIP server replies to the request it is trying to send it to the private address rather than the public address.If the static (inside,outside) 64.200.111.11...

Hi, I have 2 ASA 5520 working in a statefull Active/Failover mode connected to two different routers which are working in HSRP. Now the routers are always taking a Active Active state as the HSRP heartbeats and communications are getting blocked by t...

I am currently running v8.0(3)and device manager v6.0(3) and wondering if there are more recent release of the software. The reason being I run a mixed environment composed of both ASAs and PIXs and concerned about running a higher version of ASDM to...

Good afternoon I have a firewall with three interfaces (outside, inside "172.16.0.0/16" and dmz "10.1.1.0/24") and I need access from inside network to internet on port 80 as access-list below. access-list inside_access_in extended permit tcp host 17...

The following websites states pre-shared keys can't be used to establish an ipsec L2TP, instead a PKI has to be in place and certificates must be used. Is this still the case for 2003 and 2008?

I am attempting to preform AAA and certificate authentication for a specific profile for AnyConnect clients hitting my ASA5550. I am running 8.2 and have everything working except when I turn on the certificate matching. I am wondering if certificate...