Network Security

We have 6500 with “WS-SVC-FWM-1 6 ports Firewall Module Rev. 3.0” (FWSM Firewall Version 3.1(13) Device Manager Version 5.0(3)F) . There is a problem regarding accessing server behind this firewall. The scenario likes this: user(client) is using ...

I am having a problem with and ACL blocking SSH from the outside interface. I do not want users to SSH my router from the outside at all. Here is my ACL and the way it is applied to the interface that faces the internet.ip access-list extended OUTSID...

Hi,I am trying to install my company's VPN so I can remote in...of course. However, I am getting an error stating that a minimum of 800 x 600 screen resolution is required to install the VPN (5.2)(Windows XP Pro SP3)I have a screen resolution larger ...

we have remote access vpn user and we wish to control their IP access on the network. Which acl's need to be applied and where to allow and block access to the internal network?The setup is:home vpn user --> Internet --> ASA5500 --> internal demarc v...

So, I have a IDSM-2 module in a 6513 switch. When I try to login to the device I get the follow error:login: PAM Failure, aborting: Critical error - immediate abortThis looks like a Linux error, at least Google searchs show that it happens in linux s...

Hi,I have some users on the external network. I have a timeout of 4hrs say. I want them to have a pre warning before they are disconnected from the system. Is this possible ? It seems rather annoying just kicking people out ?Using PIX 515E and Cisco ...

Hi,I have just upgraded ASA5540 to code 8.2(1) and ASDM 6.2(1). But now, I can't start ASDM because of "Your firewall image has a version number null which is not supported by ASDM 6.2(1)" message. Any idea?Thanx in advanceRadim

I'm running 8.2 code. I'd like to have an EIGRP learned path take precedence over a backup VPN tunnel between two sites.I ran into problems that seemed to be due to the L2L network on the VPN getting injected into the routing table as a static route....

As stated in the Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide Using the CLI Release 4.0.pdf, "If you do not want the overhead of security contexts, or want to maximize your use of security cont...

I have a site-to-site vpn with two 2811 Cisco Routers with 2 interfaces each(LAN and WAN) and a GRE Tunnel. I have an ACL implemented to allow some PCs to have access to the VPN and another PCs to have access to Internet but deny access to vpn.I want...

this is my result after change access-group dmz3_access_in in interface dmz3ICMP echo request from dmz3:17.50.1.22 to inside:172.20.1.53 ID=1024 seq=23040 len=32what does this is mean ? please explain me

Hello experts, I'm doing authentication on the firewall for HTTP and HTTPS traffic. It is working fine for the HTTP, but it does not work for HTTPS, do I require virtual http? even with that I was not getting the prompt, I was able to access directly...

I installed a new Internet router and ASA5510 cluster as the following, if looking from ISP:ISP -- router -- ASA5510 -- edge 6509router Loopback: 10.1.1.4router LAN port: 99.100.100.1router sends 99.100.100.0/24 to ISPASA management: 10.1.1.2ASA outs...

Hi all! I need to know which OIDs (SNMP) I can use to manage VPNs lan-to-lan that firewall establish.Firewall ASA. Aprecciate any help! Thank you