Network Security

Hello,I've faced to an interesting thing at my GRE tunnels.sometime packets which I've defined a static route to tunnel as below don't route to GRE tunnel.ip route x.x.x.x 255.255.255.255 Tunnel0but when I remove it and add it after a short time it r...

Our setup is this. Call comes in via SIP Trunk, routes to CallManager through ASA and back out through to the remote site via VPN. Yeah, it's a complex setup I know. The problem is that when a caller calls and gets connected with a user, the calling ...

While in ASDM via the management interface, I get ASA log entries every 30 seconds with 'deny TCP (no connection) from *** to ***/443 flags FIN ACK on interface management'. Operation of ASDM is not impacted, but I'd like to correct this if possible.

Dear All,I am thinking to configure a Policy Nat associated to a Static Identity Nat in order to exclude my internal networks from nat.access-list POI_NET1_POLICY_NAT extended permit tcp 192.168.0.0 255.255.252.0 object-group mail2 eq wwwstatic (insi...

Hi all,How can I see the current local host sessions through ASDM (grafically, like show local-host). Actually, I would like to know which local host is using how much bandwidth.Thanks,Norbert

Could someone explain the real differences between these two options on the ASA 8.2 release? I know a DMZ is assigned a different security level and the device has a real public IP assigned to it where the Public Server option is a server with a inte...

Hi,I have two FWSM in multiple contexts mode and working as active/standby. I configured DHCP relay on one context interface (DMZ), using the ASDM graphical interface. When applying the configuration, a failover occured, which led to loss of connecti...

Just a quick question - will Cisco Security Manager and Mars support ASA v 8.2 or do I have to wait for a software upgrade before looking at updating my firewalls?

Hi, I would like to know if there is a management tool for IDS/IPS. I know there is ASDM for FW. Could I use this? Thank you in advance.Regards.Giuseppe

Hi guys,I need to lock down the outside interface on an 871 router which is currently having a L2L tunnel with a remote router. I need to apply an ACL to the outside interface of this 871 and to allow ONLY the remote router to communicate with my 871...

Hi,I want to start using certificate based authentication for VPNs. We want to tie all of this into our backend Radius infrastructure using EAP-PEAP.However, if the Cisco VPN client doesn't support this we may have to start using the Microsoft L2TP o...

Hi,allI have a box pack ASA 5510 with security-plus license.My question is what is my step when i install the asa? i have to run or add any code for security licenseces or i have only install asa as it is?

New to networking so just need someone to confirm this please regarding ASA firwall. If I have created an access-list on the outside interface which allows an outside device to to create a connection to a specific ip address and port on the inside do...

Hi,Hi can someone tell me what will be the behavior of Cisco NAC in the following scenario?In a corporate LAN a user (all ready authenticated on domain) decides (because he can) to install a USB dongle that will give him access to Internet by mobile ...