Network Security

Hello,I hope someone has met this issue and found a solution.We have two sites with an ASA 5520 in each. We use ipsec l2l between the sites. My problem is that after upgrading to 8.2 an interesting and pesky problem arised. After the SA expires it re...

guys, the only way I can access my ASA is via SSH. It asks me for username which I put "pix" and for the password, I put the enable password I created.This however only gets me half way in because it then asks for the enable password. I type the enab...

I am seeing the following in the ASA syslog:[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 43 per second, max configured rate is 5; Cumulative total count is 26209According to...

Hi there,I have a funny problem.I build up a hub and spoke VPN, with RAS Client VPN access for the central location.All tunnels and the RAS VPN access are working fine. I use the tunnels for Voip, terminal server access and a few other services.The o...

Given the following config,host 192.168.0.1 should only open ports 80, 5067 to the outside world and should be able to access the web on port 80 and outside smtp servers on port 25 only.The problem is that host 192.168.0.1 allows all traffic in and o...

Does anyone know of a way I can setup SSL VPN to allow users to remote desktop into their own individual PCs? I am looking into a way to allow a number of normally non-remoting, mostly non-technical users remote access back to their PCs. Our normal r...

GreetingCould anyone advice me why asa5520 keep dns udp connection and never expaired.my other connection seems ok, only udp:53 can not expire.my timeout configure is:sh run timeouttimeout xlate 1193:00:00timeout conn 0:00:00 half-closed 0:00:00 udp ...

I tried to set up traffic shaping on our PIX to restrict users from reaching th 3mb limit of our bonded Ts. One I applied it to the outside interface, all outbound traffic was shutdown completely. When i removed it from the interface, traffic immedia...

Currently we have 5 remote IP Phone users. They use Nortel IP Phones(model#2004) which are plugged into a Nortel Contivity 221 VPN switch. Presently, they connect to a Nortel 1100 router at the office. The goal is the following:1. Set up VPN between ...

I am having slow application performance thru a site to site VPN. I am running MS SQL and Oracle database applications thru the tunnel. I have a 10 MB pipe from the ISP on both ends of the pipe. These are different ISPs. I have done speed tests and I...

i have switch 6509-e and blade firewallbut i don't know why the firewall block traffic in interval time , and lost the sync between the IPS and firewall

I have a remote ASA. This has a site-to-site VPN tunnel to the core ASA. The remote site LAN subnet is a duplicate of one already known in the core. For various reasons we can't change either at the moment.I'm trying to find a way that we can NAT the...

Hi All, I wanted just to check the impact of running 2 PIX 535 as Active/Standby with different Image 7.2.2 and 8.0.2I am getting only this warning:Any feedback is appreciated.Jean ************WARNING****WARNING****WARNING****************************...