Network Security

I have a number of devices on the DMZ with a number of permits, but I see that last permit in the ACL is :access-list dmz_incoming extended permit ip any anyI would like to get rid of the ACL for the obvious reason but when I do, the devices are unab...

The Maximum 3DES/AES VPN throughput on ASA 5505 is 100Mbps, what is the SSL VPN throughput performance on ASA 5505?Any 64 byte Packets per second(PPS) value on ASA 5505 SSL VPN?

Hi,I have a huge problem with one of my ASA 5505's. It seems like every month or so, my ASA crashes. The crash always occurs when a user tries to establish a SSL VPN connection.My other ASA's are working just fineI've added the output of show crashin...

Hi 1: DHCP is configured on a Switch , lease period is 30 days , Every time a PC reboots , its getting a new ip , please help me in fixing this . Please let me know more about dhcp database , will that be a solution to the lease problem ?2: i have go...

I am upgrading IDSM software for the first time. The software file format is .pkg . Can I simply put it on the flash memory of the switch and upgrade from there just like IOS images? The difference is IOS images are .bin. What is the easiest way to u...

2 ASA boxes in failover mode.Say, if we have to physically remove one box from the pair, can we just remove it physically without any outage?Or is that services may be affected, as most of the devices off this firewall would be pointed to the vip ip ...

Hello everybody,I need your help with a VPN that's driving me crazy.I have to establish a tunnel between a Cisco C837 and a SonicWALL PRO 4100.- The Cisco router has a dynamic public IP.- Cisco local network: 172.16.41.24/29- The SW has a static publ...

Do the management interface routes tie in with the other routes on the ASA or are they separated? I'm trying to figure if say network 10.10.2.0 is granted management access would that that route conflict with site-to-site VPN traffic from the same so...

setting up a L2L vpn from a 5510 to someone else's Checkpoint and I have a couple questions.First of all if we are using static nat...translating our private addresses to public addresses...should the encryption domain reflect the translated or untra...

Due to Advisory ID: cisco-sa-20090408-asa, I have tried to update a new ASA 5510 from asa708-k8.bin to asa812-19-smp-k8.bin, asa804-28-k8.bin, and asa804-k8.binEach time I tftp the new image across, and modify the system boot entry to boot the new im...

HiI have established a VPN Lan to Lan connection between my office and a remote peer. The connection is used for ftp and files have been flowing through smoothly. Recently the connection became very slow and we suspected the Server which was very old...

I have an ASA 5520 with EIGRP enabled and am redistributing static routes. I have a static route that is attached to an interface. If that interface goes down will the ASA still distribute that route?Thank You