Network Security

I am unable to allow an inside host access to the DMZ. I have ip any any access lists set up on both interfaces and the following static "static (inside,dmz) [internal_ip_subnet][internal_ip_subnet] 255.255.255.0

I have 3 windows 2003 terminal servers setup for load balance using Windows Network Load Balance Manager. IP addresses 192.168.1.14, 192.168.1.15, 192.168.1.16 Cluster IP 192.168.1.40 multicast. I have a remote site connected via site to site VPN tun...

Hi,I am using ASA 5520.Is it possible for me to terminate 2 or more than that isp on and run it as load share and failover?Failover can be worked out with two isp..I want to use it as load hsare and aggregation too.If not is there any alternate solut...

Hi,I'd like to apply individual shaping for different classes of traffic which are traversing an ASA.The documentation of ASA (8.0) tells me that "Traffic shaping must be applied to all outgoing traffic on a physical interface or in the case of the A...

I have a number of devices on the DMZ with a number of permits, but I see that last permit in the ACL is :access-list dmz_incoming extended permit ip any anyI would like to get rid of the ACL for the obvious reason but when I do, the devices are unab...

The Maximum 3DES/AES VPN throughput on ASA 5505 is 100Mbps, what is the SSL VPN throughput performance on ASA 5505?Any 64 byte Packets per second(PPS) value on ASA 5505 SSL VPN?

Hi,I have a huge problem with one of my ASA 5505's. It seems like every month or so, my ASA crashes. The crash always occurs when a user tries to establish a SSL VPN connection.My other ASA's are working just fineI've added the output of show crashin...

Hi 1: DHCP is configured on a Switch , lease period is 30 days , Every time a PC reboots , its getting a new ip , please help me in fixing this . Please let me know more about dhcp database , will that be a solution to the lease problem ?2: i have go...

I am upgrading IDSM software for the first time. The software file format is .pkg . Can I simply put it on the flash memory of the switch and upgrade from there just like IOS images? The difference is IOS images are .bin. What is the easiest way to u...

2 ASA boxes in failover mode.Say, if we have to physically remove one box from the pair, can we just remove it physically without any outage?Or is that services may be affected, as most of the devices off this firewall would be pointed to the vip ip ...

Hello everybody,I need your help with a VPN that's driving me crazy.I have to establish a tunnel between a Cisco C837 and a SonicWALL PRO 4100.- The Cisco router has a dynamic public IP.- Cisco local network: 172.16.41.24/29- The SW has a static publ...