Network Security

hi,I have 2 units of Cisco ASA5520 and 2 units Aip-SSM20 module. Each slotted in the ASA firewall.I would like to run the 2 ASA on HA - Active Standby. My question is:- does the IPS works in Active stand by too, as what the ASA is doing? As in:- if p...

Hello all.I've this annoying problem, I'm using an ASA 5510 for vpn termination.Into this device terminate vpn also some asa configured as hw client, with nem enable.These hw client are connected to the Internet with an ISP that assign an outside ip ...

Hi,In Our network right now we are using router 3600 as our NAT devices in that we will do all NAT/PAT since we are running multiple websites running on the smae server we will use PAT the same public IP to the Different LAN IP like example :ip nat i...

Hello!Is it possible to log URLs from HTTP requests on ISR with ZBPF without external URL filtering server?I tried following configuration!parameter-map type inspect par-Inspect-HTTP audit-trail onparameter-map type regex par-URL pattern .*!!class-ma...

I have been asked to a PIX 501 between our lan and a database server (on the same lan) to allow access to certain ports.I have configured it with two test PCs and set up a rule to allow RDP but I cannot get access.I have attached the running config a...

Hi allHas anyone else experienced ASDM failures on their apples OSX machines since Java did their last update?If the are not experiencing a problem, could someone please tell me what their .jnlp files are associated with, i.e. what app does it start ...

HiI have Problem with an ASA 5505 (Base License).I have 3 VLAN (vlan1,vlan2,vlan3) i restricted the communication between vlan 1 and vlan 3 because of the licence.interface Vlan1no forward interface vlan 3 The communication to and from vlan2 works vo...

A follow up question to that posted by a user on May 3rd, 2009.On my 2621XM that uses DHCP to obtain an IP addresss from my ISP, I have a reflexive acl that allows all inside-originated traffic out and responses back in.I do successfully obtain an IP...

I have a hub and spoke configuration with a number of site-to-site IPsec VPNs from 857's terminating on an 1811 at the hub. Also in the mix is a client-to-site (EZVPN) which also terminates at the hub.I need to ensure all traffic destined for the int...

Hi Friend.I have a Cisco 5550, it ASA has 2 internals IP address 172.16.6.150 and 172.16.6.152, the both ip address must have only 1 outside ip address 10.80.10.9, but the connections must be as the following. When many machines send traffic to the 1...

Hi,I work in a financial sector of which security is very essential. I need to setup a site-to-site VPN over the internet for one of our subsidiaries oversea. However, i'm in doubt whether to use a Router at both ends or ASA FW. Does using a router h...

do CSA block certains applications when learning mode enabled?Our client claim that there are some services that are blocked, like network-printing, network share for windows clients.The CSA-MC log don't show these blocked services.Best regards

Hello,first time, sorry for my english.so i explain my problem.i have An ipsec vpn with 2 pix 515 and a router on 1 of this site.lan_a-->Pix_a--ISP--Pix_b<--Lan_b<--router<--Lan_b2traffic for lan_a and lan_b, no problem.traffic for lan_b and lan_b2, ...

Any ideas as to how onside of the tunnel is not encrypting traffic thanks #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0 #pkts decaps: 26731, #pkts decrypt: 26731,show crypto isakmp sa18 IKE Peer: Vendor Type : L2L Role : responder Rekey : no Sta...

After reviewing some of the Cisco documentation on integrating WLC with NAC, requiring the WLC to be L2 adjacent to the CAS, I am assuming that the WLC can not be configured to use LAG on the 4400 seies WLC, a specific port on the WLC must be assigne...