Network Security

I'm using Firewall Service module for Catalyst 6509.I had problem to ping and access outside ip from inside ip.For example, my pc ip is 10.1.1.5 and I cannot ping the ouside IP 115.x.x.5.My pc has also web server. I can't access it using the public. ...

Hi,I've not had any luck with this. I have an ASA with a sub-interface to a switch and from the switch I have a VLAN where a router sits to our remote office. It is not a VPN just a lease line via serial.My LAN is on 192.168.3.0/24 and the remote n...

Hi,We have a pair of ASA 5540's in a failover configuration.We have upgraded the primary active unit to v8.2(1) and have left the standby in 7.4(2). Although we get warning messages, failover works so I am leaving the standby unit on 7.4 for a week i...

Hi,I'm designing a security system that involves:2 x inside firewalls (ASA5520)2 x switches connected together (for failover)2 x IPS (4240IPS)2 x switches connected together (for failover)2 x outside firewalls (Juniper SSG)I'm at looking at active/st...

Hi Expert,I have a requirement which asks for tunneling all traffic from vpn client except for 3 public IP addresses. The Client VPN terminates on ASA 5510 version 7.2(4)The configuration I tried are as below:access-list exclude_1 extended permit ip ...

Hi every one.in our company we want to buy two ASA5520 with AIP-SSM-10 bundle for our site.i found this part number on cisco documents witch is ASA5520 and AIP-SSM-10 together.part number is=ASA5520-AIP10-K9.my Questions from you experts:1)i want to ...

LAN A -- ASA5510 -- Internet -- Firewall -- LAN B1) Client at LAN A use cisco vpn client to setup vpn tunnel to LAN B. VPN is established successfully and manage to get the ip address from the LAN B. But the client not able to ping & Remote Desktop C...

Hi there,I have at my lab a Cisco PIX 515e (failover) and it boot every 24 hours. The strange thing is every time it boots (automatic or forced one) it misses the remote access via ssh, and I have to go to the console and re-enter the "cry key gen rs...

hi,on the inside interface we have a access-list permitting tcp any any. the access-list name is inside..we have issues with some connections timing out in an hour. these connections are idle in the conn table of fwsm. how can we ensure the conn to a...

Hi,I am working on a real life scenario where I need to have NAC Appliance manages non-Cisco wireless network.I see In-Band solution is the only possible scenario to integrate non-Cisco wireless to Cisco NAC.I am looking for your opanion on the direc...

Hello,Anyone have any experience setting up a tunnel between a Cisco ASA 5500 and a Nortel Contivity 1600?Regards

Hi folks!I have an unusual task to reduce the number of signatures to deploy them to IOS router. The point is it is 871 router with only 128MB of RAM much of it is utilized and the router actually runs low on memory. I would like to minimize the numb...

I just installed CISCO ASA 5510 security plus in my network, I chose very simple configuration, DMZ security level 50Inside 100Outside 0Added some routes towards inside networkACL is in place to permit traffic from outside netw...