Network Security

I'm running 8.2 code. I'd like to have an EIGRP learned path take precedence over a backup VPN tunnel between two sites.I ran into problems that seemed to be due to the L2L network on the VPN getting injected into the routing table as a static route....

As stated in the Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide Using the CLI Release 4.0.pdf, "If you do not want the overhead of security contexts, or want to maximize your use of security cont...

I have a site-to-site vpn with two 2811 Cisco Routers with 2 interfaces each(LAN and WAN) and a GRE Tunnel. I have an ACL implemented to allow some PCs to have access to the VPN and another PCs to have access to Internet but deny access to vpn.I want...

this is my result after change access-group dmz3_access_in in interface dmz3ICMP echo request from dmz3:17.50.1.22 to inside:172.20.1.53 ID=1024 seq=23040 len=32what does this is mean ? please explain me

Hello experts, I'm doing authentication on the firewall for HTTP and HTTPS traffic. It is working fine for the HTTP, but it does not work for HTTPS, do I require virtual http? even with that I was not getting the prompt, I was able to access directly...

I installed a new Internet router and ASA5510 cluster as the following, if looking from ISP:ISP -- router -- ASA5510 -- edge 6509router Loopback: 10.1.1.4router LAN port: 99.100.100.1router sends 99.100.100.0/24 to ISPASA management: 10.1.1.2ASA outs...

Hi all! I need to know which OIDs (SNMP) I can use to manage VPNs lan-to-lan that firewall establish.Firewall ASA. Aprecciate any help! Thank you

Hi, Is it possible to have two IPS 4200 appliances in a failover or high availability pair? Or is it single with hardware bypass only? Thanks

I have a laptop with 4gb ram and i have ubuntu jaunty installed on it. I browsed online including this forum and upgraded to linux server kernel to accommodate the 4gb ram.I had installed the vpnclient before that and was working just fine. This was ...

I'm working about a solution in-band.The topology is INET(untrust)-Router-CAS-SW_level3-CAM and servers(trust).My problem is that the users in untrust network have access to the trust network, they don't authenticate and don't apply any rule. The end...

ciscoasa# packet-tracer input dmz3 icmp 17.50.1.21 0 8 172.20.1.53 detPhase: 1Type: FLOW-LOOKUPSubtype: Result: ALLOWConfig:Additional Information:Found no matching flow, creating a new flowPhase: 2Type: UN-NATSubtype: staticResult: ALLOWConfig:stati...

Can we have policy to allow any version of Antivirus Software for Eg Evualuation version (License or Trial Version) with AV update to allow in the network.Can We have Remidiation Server to update the Endpoint after Authenticating a user Instead of Go...

Hi all. I intend to upgrade my asa 5510 to version 8.2(1) with asdm 6.2(1). From cisco url(http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.html#wp310503) i found that the memory requirement for flash ram is 512MB. But my asa ...