Network Security

Hi All, I want to implement a NAC appliance for a small network of users that connect directly to non-Cisco switches.As I understand, my only option is to deply NAC in in-band mode, in this way it does not matter which switch I use because the traffi...

I have a cisco 1841 router, on which ip inspection is enabled (IPS). The inspect max-incomplete for high is 500 and for low is 400. This is a gateway to an ISP (for internet) with 512K bandwidth. I get frequent transitions between aggressive and calm...

Silly, and embarassing question.On the ASAs, is the whole principal regarding flash memory, RAM and NVRAM the same?Meaning, like on switches and routers, the Flash memory holds the OS, the NVRAM holds the starup config and the RAM loads everything an...

Dear all,i would like to use IOS IPS 5.x format. the show subsys name ips gives me following outputips protocol 2.001.001i have this image installedflash:c2800nm-adventerprisek9-mz.124-19.bin"But it seems in my IOS Version there are some commands mis...

One of our ASA's went down for an unknown reason and needed to be rebooted. After coming back up, our site to site VPN no longer works. I've tried to refresh it with a no/crypto map to no avail. Here's the syslog errors being reported by the one th...

Hi All,If I upload a file to the ASA5505 is it possible to access it via HTTP or FTP from a client PC?Failing that can files be push uploaded to the ASA somehow. Basically I am writing a small app and would like to access the file system "over the w...

I have implemented a few ASA firewall over the time and I have a question that I never solved.There is an option on ASDM in the NAT screen that says " allow traffic between interfaces without NAT" or something like this. This option insert the "no na...

Hi,I have configured Remote VPN access terminating at ASA5510 successfully.Remoye client is getting the IP assigned by the ASA,but that I am not able to ping the ASA inside Interface IP address and not able to ping any PCs which are in inside network...

Hi,I'm working in a migration of a CheckPoint Firewall to an ASA5520. I freeze on a situation that seems ASA cannot "reproduce" CheckPoint configuration. Follow the scenario:- IP Address X on the Internet access IP Address X1 in the Inside network th...

Hello All,I am wanting to restrict HTTP access in order to stop things like MSN and Skype working while still allowing WWW.I notice that there are some default class maps preinstalled. But to save time is there a downloadable list that I could use t...

I have a FWSM module running on a Switch that has Catos. I have tried the traditional command, of sess slot proc, and it wont take the command. Can someone tell me what the command would be in order to get into the fwsm.

Does anyone have a show command that will let me know what the module's model numbers are in a Pix 535? I need to do a parts replacement and don't have access to the box.Thanks for any help.