Network Security

Hi, I have applied interface service-policy with class-map included all traffic. Yet when I do show access-list, I don't see any hit counts. Do hit-counts normally show against ACL attached to class-maps/policy-maps and service-policyThanks

Hi,We have an ASA5510 set for VPN connections. We have 3 clients that will simultaneously connect to our VPN using one Public IP since they are located in one office. I have observed that only one connection are able to successfully connect. Is there...

Customer has two core 6506 switches, and all VLANS are running HSRP between the core switches.Customer is adding a FWSM to both core 6506 switches. They plan to 'firewall' traffic between the Voice and Data VLANS on both core switches.How will I conf...

I need help...We had a local firm setup our Pix 500 series firewalls and they disabled the http interfaces. I am not that great at the command line arguements and work much better via the browser based window. I now need to make a couple of modificat...

I have a user attempting to connect using the 2.3.0.254 anyconnect client, I am seeing them show up as an SSL CLIENTLESS user, and then he has no access. Any thoughts.

Dear all,i have problem of multiple gateway with VPN, please refer to the attached pics:PC B cannot ping PC A if PC A's gateway is not pointing to the VPN Routerif i change the PC A default gateway to 192.168.1.2 ( VPN router) , then PC B can ping it...

I am trying to upgrade one of my PIX 515E (128 MB of memory/16 MB flash) from 6.3(4) to 8.0(4), without going through the progression (6.3 to 7.0, 7.0 t0 7.3, 7.3 to 8.0). My plan is to simply load the 8.0 image into flash, erase the config and then...

I am upgrading from a 515E to and ASA 5510 and I have multiple VPN tunnels setup in the configuration. I don't have all the documentation on them, meaning all of of the keys. Does anyone know how to pull the current config with the keys unencrypted...

Can anyone explain why I have no problems with a VPN using this ACL:permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.0.255but this one:permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.7.255 doesn't work? I am only narrowing down the number of networks on t...

Router A has VPNs with two different remote sites but each remote site has overlapping subnets. Site B has subnets 10.11.0.0 / 16 and Site C has subnet 10.11.15.0 / 24. I tried tightening the ACLs and it caused problems with the VPN to Site B. The VP...

Hi all --A brief rundown of what I'm trying to do: An ASA 5505 without the security license sits in front of our office network. We have a block of five IPs from our ISP.We need to allow relatively liberal access from outside to one server via three...

I have a pix 501 (6.3(5)) that I need to be able to use to connect to remote vendors with. I also need to have the internal host on my side be nat'd to an address in my outside interface range so the vendors will connect to that device as the exter...

I just started receiving this message today whenever a user accesses the DHL website.199.41.238.32/0 --> 10.30.99.18/0 TCP <P>Microsoft Internet Explorer Method Parameter Validation Vulnerability</P>,NR-7427/0,Time:1229629119,Risk Rating:100,VLAN:0,A...

Hi,What will be the configurations needed to perform a intra-chassis active-active failover between 2 FWSMs, i have done defining the failover and state vlan on switch and also defined it in firewall vlan group.

I have our FWSM setup with the MSFC on the inside. I have an outside interface (0) and a inside interface (100). I need to add an additional interface for a internal department. I created a VLAN on the 6513 and presented it to the FWSM. I defined tha...