Network Security

Hi,I have to implement the traffic shaping on user flows based on profile authentication because I want to configure SSL VPN clientless.I would like to know if the ASA 5500 appliance is able to do that or I have to know the destination IP address and...

I'm trying to setup transparent caching to a Squid server using an ASA5505 running the 8.2(1) software. I believe my config is correct, but still the Squid server cannot register with the ASA. In the ASA I have this:wccp web-cachewccp interface Ins...

Hello all,I have two ASA5510 with Base License, connected on dedicated link. So far I have a site to site VPN configured to encrypt the traffic between the two sites. Now, we want to implement VLANs at both sites and be able to transmit the VLAN info...

Dear All,I am configuring site to site VPN, I have one 2811 and one 1811 cisco routers,Please tell me by using this configuration do i need to dial ??? or it will connect automatically,,,from the router it pings its live ip but dont ping inside ether...

Is it possible to setup a site to site vpn with a pix501 when one site has has a dynamically assigned external IP? The pix is running verion 6.3, is there any other way around this that doesnt involve changing the config everytime the IP address cha...

All,I've noticed that I can't ping a public device (on my block) from the vpn. The vpn is NOT my firewall, but another ASA (5520). The inside interface on the ASA is on my private side. From a host on the lan and not on vpn, I can ping this device. T...

Hi, I'm seeing a lot of "DENIED LAND ATTACK" messages coming from a PIX 515 v.6.3 on my CS-MARS console. I'm not a PIX expert, but couldn't spot anything.It must have something to do with the NAT (Internet searches have pointed my to such things as D...

I have a Pix515 and was wondering if there is an easy way to email administratos when an inspect rule is violated. For example one of my ESMTP rules was violated and the following was logged in syslog:%PIX-4-108004: ESMTP Classification: Dropped con...

Hi,Can anyone tell me if/how to generate/install a Certificate from our internal windows based certificate authority.We have redundant CAM and CAS and need to deploy to a production environment but the only certificate is the default perfigo that the...

Dears,    i connected new branch through DMZ "new" on PIX as follow.i reached all LAN but i can't get Internet although i can resolve from local DNS.attached PIX conf and HQ routernew dmz is "new" and new subnet is 1.1.1.1

Hi,Could the use of sub-interfaces on the DMZ of a FW prevent servers within the same DMZ from communicating at application level? Servers on same subnet were not able to telnet to their application port.

All,I have a 5550 that is in production. I've noticed that the only url logging that I'm getting is from the outside in, but not hosts on the inside out. I have my inspects under my global policy, so is there something else that should be done? I hav...

Hello,I currently have two ASA 5510 sec plus versions and one AT&T MIS router with one interface and 3 T1 lines in.I would like know some suggestions on the best way to use both ASA's on a single wire connection. My idea is to split our VPN traffic (...