Network Security

Hi I want LAN to LAN tunnel between ASA and 1800 with FQDN i.e peer=ccde.vpn.com for 1800 and support.vpn.com for ASA rather than using peer ip addresses in 'set peer .. ".Is this possible to use FQDN for tunnel peers ratehr than ip addresses ?Thanks

We have a site to site vpn connection between two asa 5520's which works great for most things, but we have a few servers on each end that we have to ping to establish a connection. Currently we have a batch file written to ping every 10-15 min to ...

I have a ASA 5540 (actualy 2 in Active/Standby setup) connected to the Internet and Internaly a DMZ where I get the traffic from my SecureMobile provider.On remote site I have a Sarian DR6410 router with a ADSL interface and a GPRS/3G int. I have no ...

My remote vpn users (connect to asa5520 for vpn endpoint) get the asa as their default gateway. How do I make our actual core router their gateway once connected rather than the asa? Its causing them some routing issues and connectivity issues to c...

we have a senario where we utilized vpn load balancing with certificates. recently, we are having a problem where when the ssl client tries to go to the url for the virtual ip, it gets presented with the device certificate rather than the virtual lb ...

Hi all,i have to make DMZ in my network already my servers are working in inside network, but now i have to shift these server to DMZ,kindly look at my configuration and guide me with configuration how i can achieve this goal. Thanks*****************...

i have an asa 5505 guarding a single web server. it is running dns. ports 80tcp and 53udp/tcp are opened.the problem is that every once and a while my server sends out a large amount of DNS replies causing it to go over 10000 conn limit (replies to ...

I have just run in to this ridiculous ASA bug where ASDM stops working if uptime is over 1 year.http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsr89144Could someone please tell me if CSCsr89144 is fix...

hello,i want to know about natting applying from dmz to intranet for security leve is 50 and 90 respectively.now how i can do natting of this condition.

I have a ASA5510 which should have 4 10/100 ports and a 10/100 management port. I am unable to access or configure e0/3. Is this a limitation of the Base license? Or a limitation of 7.0(8)???Here is the sh ver... it doesn't make much sense interm...

When upgrading the ASA and ASDM image on a failover pair do you only need to change the boot system image and asdm image path on one device or both?Are there any tips to bear in mind when attempting this?

I have been trying to find a solution to the following scenario for some time but with no luck.Is there a way I can restrict the Cisco ASA or Concentrator to only accept client connections where the used certificate key usage is Non-Repudiation (or a...

Here is my configuration.access-list inside_access_in extended permit tcp host Mailint any eq smtpaccess-list inside_access_in extended deny tcp any any eq smtp access-list inside_access_in extended permit ip object-group internal-net any access-grou...

Problem statement:SSL VPN Client (AnyConnect)SSL VPN users are authenticated using the local user database stored in the Cisco ASA.SSL VPN is also sharing the same local user database with ASDMProblem lies where by the ASDM administrator (Privilege 1...