Network Security

Good Day,We have an ASA 5550 v8 installed to provide nothing more than one to one dynamic nat in a large college residence hall. (One public IP is reserved for PAT in the event that the public one to one pool is depleted).As a college residence facil...

Hi - When configuring static NAT, the configuration guide states that you use the format 'static (inside,dmz)' where your connections are going to be initiated from the inside to the DMZ.Access-lists permitting, will this allow connections to be init...

I got an FWSM that I'd like to try using Trusted Flows Acceleration on. The docs say to use the service-acceleration command, but it just complains that I don't have the required license key. sh version says Service Acceleration is 'Disabled'. My ven...

Hi, when trying to connect two cisco routers through VPN, the only debug I have after activating it for crypto isakmp error, ipsec error and crypto engine is :*Apr 22 14:31:31.672: ISAKMP:(0:0:N/A:0): construct_initial_message: Can not start Main mod...

How to see the total flash size of Cisco C6500 FWSM..

Hi,what is a default value of spanning tree cost for data port on IDSM2 module?If we put commandintrusion-detection module 4 data-port 1 spanning-tree cost 1what is changed?

Hi,I've configured a active/passive cluster with a couple of 5520s. When making changes to the cluster, I don't worry about primary/secondary or active/standby, I simply use the ip address of the active ASA.Is this ok/normal/best practice? Does it ma...

I am using an ASA 5510 for both remote access and site to site VPN. Is there a way for the remote access clients to access the remote sites via the site to site tunnels? I have included the IP address range of the remote access clients in the crypt...

Hello All,I have an ASA5505 appliance and want to create a dynamic access list like in this example (http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scflock.html)But I can't figure out how to do it on my ASA.Basically I want the...

My customer has a 5505 at home that is using EZVPN back to a 5510 head end. Behind the 5505 he has a laptop and a Cisco 'Soft' phone installed upon it. He can make calls but is getting only one way audio. People can hear him but he cannot hear any...

Hi,Please can someone help me establish why only wired connections (outside the network/over the internet) are able to connect to SSL VPN?If I use a wifi connection at any location outside of my network, then I cannot connect to my SSL VPN. I can on...

how do I configure the following ACL on the ASA.Program: EmployerCDROM.exe Address: 127.0.0.1Port: 46720Direction: InboundProgram: EmployerCDROM.exe Address: secure.gateway.gov.uk Port: 443(HTTPS) ...

Hello,we're running a Pix 515E-Pair with Version 7.0.4 in Active-Standby-Mode. After a Crash and resetting the Standby-Unit, the Unit does not receive the whole Configuration, the Public-keys are missing! Is it possible to export the Keys manually to...

Hello. I recently replaced a router with an ASA 5505. The router was set-up as the primary dns server:ip dns serverip dns primary [url] soa [url]Is there a way to replicate this on the ASA?