Network Security

I have setup a L2L VPN for a customer in which the vendor requires their IPs to be natted when they come across. So, I have setup policy nat on their pix for the L2L VPN. Here is a snip of the NAT config: access-list nat-to-vendor permit ip 192.168.1...

Can I upgrade a failover pair from 7.0(1) to 7.2(4) directly without having to upgrade to a 7.1 version first? These are being done on a 515-E pair, can this still be done with a zero downtime upgrade?

Dear ALL,I've implemented a test configuration like cisco document ID 82020, but a single Lan-to-Lan and a remote VPN access. Lan-to-Lan behaviour is ok and remote access seems to be running within the first lan, but if I try to ping hosts on withind...

Hi, I have three policies (see below)which make up a crypto map policy on a security device. How does policy 10 match traffic if there is no "match address" statement? This is the peer I wish to edit but don't know how it is matching? Is there a defa...

Can anyone help? I am unable to access the management interface of my ASA unless I am in the same subnet. There does not seem to be any way to give it a gateway address. So I have to manage the ASA inband via the inside interface.The interface config...

Hi all.We have several remote sites, connecting to headcuarters over IPSEC vpn to a Concentrator 3560.The concentrator have a public ip, and the internal interface is on a DMZ firewall.We need to tunneling all remote sites traffic including internet ...

We are switching providers & need to know if I can route/NAT both providers at the same time. By having both providers connected on different interfaces it would give me the ability to test the new ISP & would give me the flexibility to make changes ...

Has anyone been able to modify the look & feel of the Network User Authentication screen provided by the PIX/ASA when using the aaa authentication listener commands?It's located at: http://IP_Addr:port/netaccess/connstatus.htmlI'm aware that you can ...

I have an ASA whose end of access list for a group doesnt showup the implicit deny ip any line.I believe this is by implicit built in, but it doesnt show up in config.Does this require to be added in manually at the end of acl & should it be appended...

Hi all,I have a ASA 5510 with 2 interfaces outside that 2 internet links are connected it.I need to do that a host in inside netwok goes out by a interface outise and others host goes out by other interface.Someone know how can I to do this?

Hello,i have a dmvpn topology, .When i try to ping the real ip on the hub's outside interface from the spoke, the delay is approximately 100ms, but when i ping the tunnel ip address the delay becomes 4000ms.Your help is really appreciated

I am upgrading my old Linksys router/access point at home from DD-WRT to an ASA5505. One of the nice features of DD-WRT on Linksys is that I was able to dynamically update my outside IP address to resolve to my <hostname.dyndns.org>. Does the ASA5505...