Network Security

Hi,I'm designing a security system that involves:2 x inside firewalls (ASA5520)2 x switches connected together (for failover)2 x IPS (4240IPS)2 x switches connected together (for failover)2 x outside firewalls (Juniper SSG)I'm at looking at active/st...

Hi Expert,I have a requirement which asks for tunneling all traffic from vpn client except for 3 public IP addresses. The Client VPN terminates on ASA 5510 version 7.2(4)The configuration I tried are as below:access-list exclude_1 extended permit ip ...

Hi every one.in our company we want to buy two ASA5520 with AIP-SSM-10 bundle for our site.i found this part number on cisco documents witch is ASA5520 and AIP-SSM-10 together.part number is=ASA5520-AIP10-K9.my Questions from you experts:1)i want to ...

LAN A -- ASA5510 -- Internet -- Firewall -- LAN B1) Client at LAN A use cisco vpn client to setup vpn tunnel to LAN B. VPN is established successfully and manage to get the ip address from the LAN B. But the client not able to ping & Remote Desktop C...

Hi there,I have at my lab a Cisco PIX 515e (failover) and it boot every 24 hours. The strange thing is every time it boots (automatic or forced one) it misses the remote access via ssh, and I have to go to the console and re-enter the "cry key gen rs...

hi,on the inside interface we have a access-list permitting tcp any any. the access-list name is inside..we have issues with some connections timing out in an hour. these connections are idle in the conn table of fwsm. how can we ensure the conn to a...

Hi,I am working on a real life scenario where I need to have NAC Appliance manages non-Cisco wireless network.I see In-Band solution is the only possible scenario to integrate non-Cisco wireless to Cisco NAC.I am looking for your opanion on the direc...

Hello,Anyone have any experience setting up a tunnel between a Cisco ASA 5500 and a Nortel Contivity 1600?Regards

Hi folks!I have an unusual task to reduce the number of signatures to deploy them to IOS router. The point is it is 871 router with only 128MB of RAM much of it is utilized and the router actually runs low on memory. I would like to minimize the numb...

I just installed CISCO ASA 5510 security plus in my network, I chose very simple configuration, DMZ security level 50Inside 100Outside 0Added some routes towards inside networkACL is in place to permit traffic from outside network into DMZ, users wil...

Okay,I have a device on dmz2 that the company apparently does nat for us. I've tried to exempt nat traffic, but it's not working. My dmz interface is 10.45.127.66, and they said that I can source from that address. I've thought about natting the conn...

All,I have a problem with 1 dmz and port translation:%ASA-3-305006: portmap translation creation failed for tcp src INSIDE:10.128.100.75/1577 dst DMZ2:1.1.2.1/23I'm using nat exemption, and the following line is in my config:access-list NONAT line 2 ...

I am trying to setup a 3640 to act as a VPN server. I can connect fine to the 3640 using the standard windows vpn client. However, I am not able to determing the remote gw over the tunnel. I have selected use gateway on remote network on the client s...