Network Security

I have a ASA 5510 and I'm currently using it to serve my VPN client (ipsec) users. I want to be able to also use it for the AnyConnect client but limit who can use the client to connect. I'm authenticating my users using a Windows IAS server and I pu...

Hello,I have a client that is unable to connect via Cisco VPN IPSEC Client to a ASA. We use Certificate Authentication. Basically the client disconnects after authentication information is entered. There are no issues connecting via AnyConnect to sa...

Hi,I was just wondering about best practices when it comes to remote administration of the ASA.It appears that SSH is the best option, but the one thing that bugs me is that I would have to allow SSH access on the outside interface for all IPs since ...

Can anybody point me in the right direction. I'm running a PIX 535 v8.0.3..I'm attempting to connect from a specific VLAN (100) to a destination IP outside of our enclave (160.130.x.x). from this VLAN, i'm performing telnet, trace, ping, etc ALL of...

Can the ASA police flows based on the destination IP but not related to a VPN tunnel? I am trying to set download rate limits to my users. Limit each individual IP to 2megs on Internet to help smooth out the peaks in the Intnernet pipe.I am thinkin...

Hello.My Cisco ASA firewall is set to allow inbound HTTPS connections to a webserver, which works great.Exemplified by the log entry below;access-list outside_access_in permitted tcp outside/22.44.55.77(22913) -> inside/WEBSERVER(443) hit-cnt 1 first...

According to the following documentationhttp://www.cisco.com/en/US/products/ps6120/prod_models_comparison.htmlI'm reading that my 5510, which has the Security Plus License, should have 2 interfaces capable of gigabit speed, but when I look at my ASA'...

The following link shows Out-of-Band (OOB) Deployment Switch Support. Will OOB NAC work if I use non cisco managed switchs (or do I have to use all Cisco Switches)?http://www.cisco.com/en/US/docs/security/nac/appliance/support_guide/switch_spt.html

I ahve a ASA 5510. We have a vendor that is requiring us to NAT 50 internal IPs to 50 of their IPs. We did static 1 to 1 NAT for a couple of these and yes it works....but 50 static 1 to 1 NAT statements...is there a better way. We can only change the...

Hi,I am seeing strange flags in the output of 'show conn' that seem incorrect to me, and I'm hoping someone can explain why.According to command ref:f =inside FIN F =outside FIN r =inside acknowledged FIN R =outside acknowledged FINI =inbound data O ...

Net Pros,We have about 20 remote branch offices. Office size varies from as small as 2 users per office to as large as 30 users per office. Each office has either a Cisco 1801 or 1841 router that we manage. These routers basically provide DHCP, NA...