Network Security

Hey Everyone,I've run into a problem and I can't tell if it's a "you can't really do that" type or the brain-fart type.We are starting to test out the AAA cut-through-proxy feature to see if it can satisfy some access requirements we have. I have the...

We are going to have 10 remote sites connect to us for a L2L VPN to access data at our location. We have no control over the remote sites, and my guess is most will br 192.168.1.x IP range. How can we make this work?? Remember, I have no control over...

Hi: I can't seem to figure out what these two messages (609001 and 609002) from a PIX firewall mean. Can someone help.======================Message: %PIX-6-609001: Built local-host interface_name:IP_addressExplanation: A network state container is re...

so we have a NAC in our lab, set up as L3 OOB....we have a vlan set up for internet only access..a route map is configured on the CORE to send the internet only traffic back to the NAC for restrictions (to mimic the inband solution)......in our unaut...

Hi everyoneWe're noticing under stress testing that our ASA5520 is maxing its CPU out at about 3900 TCP connections per second. This is way lower than what Cisco quotes, and our rule set is quite small (a few dozen rules).Is this normal? We are using...

Folks, I have a question regarding FWSM failover. I was reading the documentation and it said that hellos are sent out over the failover link as well as all the interfaces. If any of the interfaces goes down the firewall is declaired down???wha...

I have asa 5540,four interfaces inside,outside,intranet,dmz,inside.i have my antivirus and domain controller dns server is in inside zone ip 192.168.x.x and some my web servers is in dmz zone ip 192.168.y.y,now i want to insatll antivirus trend micro...

I have a FWSM that seperates various segments on the network. For some reason at times connectivity to some hosts stops without any indication why.I had done some checking and discovered that there seems to be a corrupt XLATE created at times, which ...

I have a cisco ASA 5540 firewall with a DMZ segment, Inside segment & outside (Internet segment). The web server with website domain www.mysite.com is in DMZ segment NATted with public IP on Internet segment.I have allowed full internet access to a m...

Folks, I am confussed about the failover process on 6500. The doc says that if the firewall does not receive hello on failover link, it does network activity test on the interfaces. My question is what if the interfaces have gone down on a fir...

Please identify the difference between the base license and the Security bundle. I'm confused on the number of interfaces and VLAN's supported on the two bundles. The sales documentation I look at indicates that the base bundle supports 5 FE and the...

Hello,Currently I have an ASA5510 which is doing LDAP authentication for remote access VPN users.The authenticating server is locally on a port on the ASA.I would like to have a backup, but the server is currently at a remote office, but that office ...

"Inbound TCP connection denied from 1.4.19.244/1635 to 1.4.20.212/4001 flags SYN on interface inside"The vlan on the inside interface (vlan19) also needs access to systems on vlan20 so we have a static route on the asa that points to a router that a...