Network Security

I am having my inside network connected to L3 switch with ip subnet of 172.21.18.0/24 & 172.21.19.0/24 . My all traffic from outside interface is blocked except some application. For last one week i am getting error message continously 6GB error mess...

Hi,customer has two version of McAfee antivirus. What I need is - user get the same role when login to PC with version X or PC with version Y. Is it possible to create AV install rule with OR logic? Something like if on PC is installed version X OR v...

Cisco document says by default traffic from higher level interface to lower level interface is always allowed. However it seems for traffic going from higher interface to lower interface, ASA always checks xlate table first. So there should always be...

Hi All, I don't have too much experience with NAC deployment. I want to go with L3 (because we have central site), OOB (for LAN) and IB (for wireless and VPN). but I don't know whether I should go with real gateway or virtual gateway. I know virtual ...

I have a ASA 5520 and would like to know how to setup NAT overload so my internal users can access the internet with the one public IP I have.

Hi, I have configured RA vpn for remote users in ASA 5520 with version 8.0(2). The vpn was working fine since yesterday but somehow it has started giving an error in the debug of the ISAKMP & IPSEC that its not able to provide an IP Address to the cl...

Hi,I would like to know if the following scenario is possible or not.There is an IPSec VPN between an ASA 5520 and another VPN device at a remote site. There is a central DHCP server in the INSIDE on the ASA. Now this ASA should release IP address to...

I have a Mail Server behind Firewall. With an ipcop firewall connected and port 25 forwarded to the mail server ip, the exchange server works perfectly.Now I have a combination of Cisco router and PIX. I cannot seem to be able to configure the pix an...

Hi,I have problem with backuping my conf through RA VPN using WRITE NET command.MYASA(config)# write net 192.168.255.1:test.txt Building configuration...Cryptochecksum: c366c4dc eaea3f0c f2f87a80 8ba48cd0 !!!!!!!!!!!!!!!!!!%Error writing tftp://192.1...

Hi,I know that is possible to find Real-Time VPN Statistics in the ASDM at : Monitoring > VPN > VPN Statistics > Session -> SSL VPN Client filter by All Sessions.But, I would like to obtain a monthly summary of VPN activity. Is it possible, and how c...

Hi,I want to know if is possible create a VPN where the remote and local network be the same, and what requirements this has.Thanks

I am running an IPSec VPN tunnel between a 2801 router running the c2801-advipservicesk9-mz.124-15.T9.bin image. The other VPN endpoint is a PFSense firewall. The tunnel is established. The issue I'm having is that with the tunnel up we were not able...

Hi, i have a ASA5540-AIP20-K9 with ASA-SSM-CSC-20-K9 module, but this module is not coming up, in ASDM and for entering the license it doesn't accept old password that should be "cisco" as document says, i don't know how can i reset the module to fac...

Setting up a new DMZ on my ASA 5520 running 7.2(3). I want to allow by exception into the internal network, but allow everything out to the external network. I'm only using private addresses on the internal network. If I simply have a few permit stat...

Hello;After installing CSC SSM in ASA5520 everything works fine with the exception of updates for my cisco Ironport email appliance. The update appears to just time out and never pass 0%. Anyone had similar issues or suggestions?Tks,Adam