Network Security

Problem statement:SSL VPN Client (AnyConnect)SSL VPN users are authenticated using the local user database stored in the Cisco ASA.SSL VPN is also sharing the same local user database with ASDMProblem lies where by the ASDM administrator (Privilege 1...

I have an ASA 5510 in our primary location with all inbound / outbound traffic directed through it to our primary ISP. I now have 5 systems in a remote datacenter behind a 2nd ASA 5510 and a 2nd WAN link from a 2nd ISP (the data center). I want to us...

I have Netflow enabled and collecting data on my 5510. My problem is that the interface on the ASA is 100Mbps, and my internect connection is only 4Mpbs. My netflow data show all traffic at 1% or less because of this. Is there a way to fake the ASA i...

I have a remote access vpn setup on a 2801 router (384Mb DRAM, 64Mb Flash) which works fine using IOS c2801-advsecurityk9-mz.124-25a.bin. I have try to upgrade to a .T IOS so I can setup the Browser Proxy Settings options. But whe I upgrade I get v...

Hello, I have configured the tunnel between router-ASA. The tunnel is up but there is no reachability means, Not able to ping remote LAN IP.1) At Router end, I am able view the encap packet,but No DECAP packets under "sh cry ipsec sa"(other tunnel ar...

Hi all. I have implemented ssl vpn on my asa5510. However it seem to support only 2 concurrent sessions. If i use the same userid for more than 2 concurrent sessions my login would fail. Is there any way to increase the concurren session limit? Thks ...

ssh was working perfectly for one year on ASA 5510 (ASA 8.12) until it was recently upgraded to ASA 8.21. When i try to connect via putty, i get'Network error: Software caused connection abort'I regenerated RSA key to no avail. Please advise. thanks

Hi,we have this module on an ASA 5540, while the inspection load is reaching a max of 35% , the cpu is reaching 100% sometimes.1- how do i check the current bandwidth in Mbs being inspected ?2- how do i check if there is drops when cpu is reaching 10...

Can anyone recommend sources of Cisco IPS best practice documentation? This product seems to be one of the few Cisco products without a legion of 3rd-party/Cisco Press books.

Hi,I have ASA5505.& I want interVLAN communication between 5 vlans. I have Security base IOS which is supported up to 20 VLANs.I created 5 different Vlans & assign different security levels, 1st is 100 2nd 90 up to 80 and 0 for outside interface. now...

Hi, hope someone can helpI have a ASA 5510 with 2 domains connected to separate internal interfaces both NAT'ed to public IPs and one external interface with a public IP everything is working great apart from if one domain sends an email to the other...

I have following scenario:PC--->6509--->ASA5510--->VPN Concentrator--->L2switch--->checkpoint--->internetNow in ASA5510 I have nated inside IPs(dynamic Nating) as per my destination IP. If I want to reach my L2switch or VPN concentraor from my deskto...

HiI have two queries: First - We have an FWSM in 6500 with FW OS 3.2(12). It allows only 1 vlan (SVI) to assign to firewall vlan-group. If I want to assign more than 1 vlan, I need to add this command "firewall multiple-vlan-interfaces". The document...

Hi. We're attempting to configure a urlfilter on a C861 router. All seems to be OK - the log shows that it is communicating with Websense. However, no traffic is being sent to Websense - it appears that the policy-map is not picking up the web bro...

It started when there were emails destined to this domain (only this domain) got stuck in the queue of our Exchange Server. I tried to telnet to port 25 to the mx record for that domain from our exchange server, which is behind firewall (cisco 515), ...