Network Security

Hi,I have configured ssl vpn on asa5520 running 8.x software. I have created local user name and password for ssl vpn users. When i am giving username and password to login that username and password allow me to login for only one time when i am tryi...

Dear All expert,I would like to ask you some question and the same time i had issue too.i had ASA5510,i had interface Inside,Outside and DMZ.On Inside i have two server(primary and bakcup), so i want to allow some port from DMZ to inside( i mean i wa...

Hi,I am having some weird problem. we have configured access list for the applications on ASA outside interface. It is working also but I am not able to see any hit count on the access list. It increases only by one when a new session is initiated f...

Our Client is having 2 ASA firewalls ( 5540 ) along with AIP-SSM modules in it . They are configured for Failover . The OS of ASA is 7 and the OS of IPS is 5.0 . I have read on Cisco website that Password recovery cant be done on IPS modules having 5...

Hopefully someone can help with a termination issue I'm having with a PIX-515e firewall; software version 6.3.4, pdm version 3.0.2.We're getting constant vpn termination errors (reason 412 and 413) from a group of users at one location. I am by no m...

I have a VPN tunnel connected between an ASA5520 and Checkpoint firewall. The issue is that Connectivity has been working ok. Then connectivity fails. The remote end targets an xlate on the ASA and Checking the ASA xlate there has been no hits althou...

Can somebody tell me what does drop rate mean in "show traffic" command output? I looked up command reference document but that doesn't have any information. I am running 8.0.4 code. 1 minute input rate 1015 pkts/sec, 1063149 bytes/sec 1 m...

Hi all.I want to limit my network traffic, outbound of my ASA, to a TOTAL of 30 Mbps.I've configured service-policy to do this, but police parameter is applied to single sessions, and not to total traffic.Is there a method to obtain this?ThanksDaniel...

I'm tasked with designing a remote access solution through an ASA v8.0 and I started by creating a text file with configuration details like group-policy, tunnel-groups, crypto (the text file looks as if you typed show run)… I'm tasked with only th...

We have a few site to site VPN connections with 5505's. Is there any way to setup a redundant config incase the first one goes down it would reestablish to a second firewall with a different ISP? I am using 5520's at both ISP's.

ntp server whatever source outside prefer ... is working flawlessly but when I try:...name 192.5.41.209 server-ntp-USNO description US Naval Obervatoryname 128.115.14.97 server-ntp-LLL description Lawrence Livermore Laboratory...ntp authentication-ke...

I want to deploy NAC in my company, I have some questions about NAC: 1. If I deploy 1 NAC server and 1 NAC manager with IN-BAND: - When NAC server dies (NAC manager oprates), traffic is bypass or not? what things will happens? - When NAC manager dies...