Network Security

I have a L2L tunnel setup with a customer where we access a web based application. To get to the app, we PAT the traffic from our inside interface before sending it to them. I need to extend access to users who are sitting at another site on another ...

I moved Clean Access Manager from VMWare ESX 3.5 to VMWare vsphere 4.0. After moving the server Clean Access manager authentication and management web-site stopped working. When i go to CAM web site i get following errors(compelete error page as atta...

HI,we have using PIX 515E and connected a site to site vpn between headoffice and branch office In our PIX we used three interface O/S - X.X.80.5I/S - 10.195.21.X -------Vlan 5 in core switchI/S 2 - 10.195.1.X ------vlan 6 in core switchthe VPN are w...

I like the advantages of using a VTI thru my VPN. My problem is that my ASA sits in between my remote router and my core router. Is there a way to have the IPSEC VTI traffic pass thru the ASA and terminate on my core router? I have available static I...

We have numerous requirements for Secure FTP transport. Can anyone please shed any light on how you are handling that requirement with the ASA?

I am having my inside network connected to L3 switch with ip subnet of 172.21.18.0/24 & 172.21.19.0/24 . My all traffic from outside interface is blocked except some application. For last one week i am getting error message continously 6GB error mess...

Hi,customer has two version of McAfee antivirus. What I need is - user get the same role when login to PC with version X or PC with version Y. Is it possible to create AV install rule with OR logic? Something like if on PC is installed version X OR v...

Cisco document says by default traffic from higher level interface to lower level interface is always allowed. However it seems for traffic going from higher interface to lower interface, ASA always checks xlate table first. So there should always be...

Hi All, I don't have too much experience with NAC deployment. I want to go with L3 (because we have central site), OOB (for LAN) and IB (for wireless and VPN). but I don't know whether I should go with real gateway or virtual gateway. I know virtual ...

I have a ASA 5520 and would like to know how to setup NAT overload so my internal users can access the internet with the one public IP I have.

Hi, I have configured RA vpn for remote users in ASA 5520 with version 8.0(2). The vpn was working fine since yesterday but somehow it has started giving an error in the debug of the ISAKMP & IPSEC that its not able to provide an IP Address to the cl...