Network Security

Hi, I would like to restrict 'config t' to user privilege level 5. Currently when I do 'sh run all privlege level all | i command configure'I can see the below privilege cmd level 15 mode exec command configurewhich I believe means only level 15 can ...

Testing a FWSM in single context mode. The MSFC is located inside. There are two interfaces. One labeled outside security level 0. Inside interface security level 100.All PC on the inside interface should be permitted outside access. I added an incom...

Hi;We have planned to place the two IDSM module in 6509 chassis with FWSM. IDSM will in inline mode.1- I understand that combine throughput will be 1GB but through which feature i can achieve it. 2- How it will integrate with FWSM. I mean what are th...

I've got a 3825 running 12.4(24)T with a WLCM module installed in it. We are currently configuring this device for deployment (very soon!). I have some zone based firewall rules setup. Basically so our WCS server at our main campus can talk to the...

Since CPU is always 100% now in v6.x/v7.x - is anyway to monitor the system load (reported in IDM/IME) using SNMP?What counter can be a good indicator for system upgrade that can be monitored using SNMP?

i have configured pix 515e for vpn client. i then installed cisco vpn client in my pc. now if i connect my pc to pix using the cisco vpn client ,i get connected and pc is assisgned a ip address from the pool i have configured in pix.my issue is : whe...

Dear All,I have ASA 5510, and I want to use one Ethernet port of it as like sub-interfaces in which I want it to have two IPs.Somebody told me that I can configure something called virtual zones !consulting your expertise, how can I do this?

Hi,I have to implement the traffic shaping on user flows based on profile authentication because I want to configure SSL VPN clientless.I would like to know if the ASA 5500 appliance is able to do that or I have to know the destination IP address and...

I'm trying to setup transparent caching to a Squid server using an ASA5505 running the 8.2(1) software. I believe my config is correct, but still the Squid server cannot register with the ASA. In the ASA I have this:wccp web-cachewccp interface Ins...

Hello all,I have two ASA5510 with Base License, connected on dedicated link. So far I have a site to site VPN configured to encrypt the traffic between the two sites. Now, we want to implement VLANs at both sites and be able to transmit the VLAN info...

Dear All,I am configuring site to site VPN, I have one 2811 and one 1811 cisco routers,Please tell me by using this configuration do i need to dial ??? or it will connect automatically,,,from the router it pings its live ip but dont ping inside ether...

Is it possible to setup a site to site vpn with a pix501 when one site has has a dynamically assigned external IP? The pix is running verion 6.3, is there any other way around this that doesnt involve changing the config everytime the IP address cha...

All,I've noticed that I can't ping a public device (on my block) from the vpn. The vpn is NOT my firewall, but another ASA (5520). The inside interface on the ASA is on my private side. From a host on the lan and not on vpn, I can ping this device. T...