Network Security

Hi all,I got a question about active/failover with two ASA5520. Design:The active one has a CSC module (Contentfiltering), the second one without.When a fallback occures, can the second ASA handle the traffic without the CSC module.Thanks,Norbert

Guy's, can any one shed some light on this please?I am trying to replace a gnat box with a cisco PIX but it would appear that the Pix can not perform what the Gnat Box does.We have PAT mapping multiple different external/translate ports to the same s...

HiI have a PIX 506E with 6.3(5) and wanted to know if I can configure VPN client with group and user authentications. I know I can configure just group authentication so users dont have to use the password everytime they try to connect. However I am ...

Hi,Can some one plz help regarding configuration of redundant Ipsec Tunnel over EIGRP. Currently all remote sites are connected with ipsec tunnel. How can i connect all remote sites auto with DR after down of DC(Priamry Tunnel).Regards

I have basic threat detection turned on on a 5520 running 8.0(4) software. This is showing a number of "scanning" attacks. From the "sh threat-detection scanning-threat" command I can see the Targets and Attackers, but I would like more details. In p...

Hi allI am trying to establish a capture and I want to exclude passive FTP traffic from the capture. The problem is that in passive ftp the control session is well defined and there is no problem excluding it from the capture.But the data session is ...

I'm about to implement static-route tracking with the below setup:interface Vlan1 nameif inside security-level 100 ip address 192.168.2.1 255.255.255.0 !interface Vlan2 nameif outside security-level 0 ip address 6.2.8.138 255.255.255.248 !interface V...

Hi,I have a ASA5505 with a security plus license that has been 'in-production' for some time but I am experiencing a 'lock-out' of a particular IP address in a DMZ with minimal usage. This IP address is configured with ACL and NAT to allow:http traff...

I have configured the following ACL but when I check on the ASDM it is showing me as deny, I have check the config and can't see any issue with it.Can someone help, here is the config:name 163.1.158.138 misibm02b object-group network oucs_training_ro...

Hi, The primary CAM is no longer reachable by Web Console. An error appears while booting. The problem has occured after high availability activation. The error message is:- Starting perfigo: Starting High-Availability services: 2009/07/22_15:08:12 C...

Hello.My router listen the tcp port 9001. As I found it is "xRemote service", http://www.cisco.com/en/US/docs/ios/termserv/configuration/guide/tsv_dialin_term_svcs_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1002661. Is there a way to clos...

I have a strange problem, it's something that just started recently when we had a user try to gain access with a Sprint Mobile Broadband card. We have quite a few remote users, probably not more than 6 ever connected to the VPN at once, and I have no...

Hi,I need to allow the following from inside to outside without compromising security, only initiated from inside.Allow SSH to devices on Internet from LANAllow PPTP and Cisco VPN (IPSEC) to connect from inside to outsideAllow ports 5130 outsideRestr...