Network Security

I have an ASA on 8.04, and have set up hairpinning to allow internal desktops to access a pair of servers via their public addresses. Config snippet below - essentially as per the CCO DNS doctoring document except for the second server. Desktop-serve...

I have ASA-SSM-CSC-20with 1000 user license and Plus licenseI wan to renew it with 250 user only.Is it possible?Or Do I need to buy new license?

I'm having an issue where I can sit on the PIX and ping everything on the internal network. I can ping everything I've allowed on the external network as well. However, I can't get traffic across the NAT to ping. Here's the config:PIX Version 6.3(...

Pros,In one of my project, the 6513 with dual fwsm installed as the core with backend firewall configuration. The outside fw zonewith secu level 0 contains dhcp server and the inside users getting the IP address dynamically.When the fwsm active modul...

Is it possible to configure the ASA to act like a load balancer? What I would like to do is have people hit a real internet external ip address and have it direct traffic to 1 of 2 servers. In essence, it would just do a round robin and direct one ...

I have an ASA 5510. I have an interface with a security of 10 called "internetguest". We use this interface to connect vendors to the internet without accessing the "inside" network. These vendors have a need to access the "inside" network. I have ou...

My DMZ is 10.45.136.0, 10.45.137.0, and 10.45.138.0.My inside is 10.0.0.0.Will I have a problem if I have my static nat stated as:static (inside,dmz1) 10.0.0.0 10.0.0.0 netmask 255.0.0.0Or will this work in translating everything correctly? I'm tryin...

Hello,Does anyone has recommandations regarding phase1/2 timers for ipsec tunnels via a gprs/umts connection?Is normal ipsec preferable (udp) or tcp?Thx!

We have a VPN Concentrator 3000 which was working fine. Suddenly for no apparent reason the admin password reset itself to the default. I can change the password on the Concentrator to anything and it will work. I can write the new config to flash it...

Hi guys,I connected an IPS in inline mode (check the attached diagram to see how IPS is connected), after connecting it, internet & every thing was working fine except HSRP, routers can't see each other.i tried to bypass the traffic (disable inspecti...

All,From my test, I think the answer is no but I wanted to get clarification. In the below config, I'm wondering if I need to assign an access-list in the dmz in order to allow return traffic back out from the dmz to the initiating connection on the ...

Hi,I am using Cisco VPN clent5.X version and my system Operating system is Windows XP-SP2When i changed the Group authentication details in Cisco VPN client the following Error has come Cisco Systems VPN Client Version 5.0.01.0600 Copyright (C) 1998-...

how to upgrade IPS signatures, will their be any risk as my IPS signatures has not been updated past one year.-Jidnesh

I have a possible bug when creating an Access Rule that happens sporatically. When using a Network Object Group with 3 members as the Destination, the ACL blocks the source that I want to permit. However, when I break up the Network Object Group in...