Network Security

VPN traffic issues.

I have an ASA and a load balancer (F5) that i'm trying to configure as follows and experiencing routing issues.A load balancer with 4 ports.Port 1 connected to ISP 1Port 2 connected to ISP 2Port 3 connected to ASA outside interface.Port 4 currently n...

Open ports tcp 135 & 445 on 877

Hello all,A quick portscan shows that port 135 and 445 tcp are open on my new installed 877 router. Why are these services running, and how could I close those?

DMZ to INSIDE access

I have a device off the DMZ interface of the firewall (PIX\ASA) and it requires access to a number of hosts on the inside (and vice versa) on a number of ports.Does this require a NAT? ACL? Can you provide an example?

Resolved! ASA 5510 Access to network not directly connected

Greetings, i have an ASA 5510 with three interfaces configured.One is the outside interface, one is dediacted to voice traffic and one is dedicated to data traffic.On the data network i have my laptop and on the voice network i have a CME system with...

RAS VPN Split tunneling

I have an ASA integrated with ACS for VPN clients to be able to authenticate with their Active Directory accounts. I need to figure out how to enable split tunneling per VPN group on the ACS. I found a doc that shows that the setting is under GROUP...

Alerts for ASA-SSM-20 IPS module

Hello,On my ASA 5520, I have the IPS module SSM-20. I use the Cisco software Manager Express 6.2. I can see great information and also configure the IPS. I would like to know what I need to do or what software I need to set alerts. I currently have a...

AIP-SSM-20...beginner question

Setting up a test lab with a new ASA 5540 with the AIP-SSM-20 module installed.ASA is up and running passing traffic for several workstations.AIP-SSM is installed and UP. I can open a session to the sensor through an SSH connection to the ASA, and ha...

NAT issue

I have an application that requires that the host clients retain their source port. The source ports range from TCP/10000-10040 and the destination server listens on TCP/12000. I need to NAT these hosts to a single IP address as well. Can I use a Dyn...

rebuilding interfaces on ASA pair...will this affect failover?

We have pair of ASA's that are running active/standby failover between them. We have a need to take one of the physical interfaces (not the one we use to connect to for management) and split it into two subinterfaces. So my question is how should I a...

Resolved! Configuring DMZ (PIX 515E) to access DNS on public interface

I'm installing PIX 515 on my network, I have three interfaces inside, outside and dmz. On DMZ I have servers with public IP Addresses which are suppose to be accessed over the internet as they are (i.e. no natting, even one to one). i'm currently usi...

FWSM got failed.

Dear All,FWSM module is not getting recognized even after restart the 6509E switch.When i checked the logs its getting error saying that onlie Diagnostics detected major error.Pl find the logs for your information Module 1 has Major online diagnostic...