Network Security

Hello, I need advice on how to setup DMVPN for the following scenario DataCenter#1 DataCenter#2 Branch-Office#1 Branch-Office#2 Branch-Office#3 DC#1 is connected to DC#2 via MPLS using BGP BO#1 is connected to DC#1 with GRE Tunnel over IPSEC (( Routi...

Hi Guys,I am having some problems with csa 6.0 and a software deployment tool called capainstaller, it resides on the client and picks up packages on some server shares and executes them from there, or copies it locally. We have added it to the class...

I am just wondering whether following Site to Site VPN configuration scenario will work.ASA--Internet RTR ---Internet Cloud --Internet RTR --ASA Where ASA is outside interface will have the private IP Address. But internet Router at both side will ha...

I see a lot of these messages, maybe hundreds per minutes. I feel this is not normal, but can never find any convincing information either way. Can anyone elaborate?

I'm seeing some weird logging behavior on an ASA5550 active/standby pair (Internet facing, running 7.2.4). As you can see from the example below, it is logging a number of denied messages for a normal (allowed by policy) TCP session. Jul 16 2008 09:2...

I have a Pix with a blank running config, I can load the 7.2 from Monitor mode OK, when I try to then get the 7.2 .bin file tftp-ed to the PIX and saved in flash it gives me a "no route to host" errorPix E1 172.23.4.125 255.255.255.0laptop 172.23.4.1...

I have a client that requires an ASA front-end firewall that will pass all traffic to an ISA Server setting in front of the corporate LAN. There will also be a SPAM filter in the ASA dmz accepting all email and passing it through ISA to the mail serv...

I'm prepping for a possible Vista/Windows 7 rollout and I'm trying to find any information about Vista comptibility with a Pix 515E. So far I am unable to connect to the VPN that is setup on the device from any Vista PC (XP works great) and I have be...

Hi, I have an ASA 5505 running 7.2.(4). I have a dmz configured which can access the outside via the implicit rule to permit all traffic to less secure networks. When I try to apply an access-list on the dmz interface to permit https access to a serv...

Is there any backup option on the Asa 5505 firewall? Or any backup option for the asa 5505

Hi.This is probably a really simple one but can you ping the outside interface of a PIX/ASA from teh inside network?It seems to be blocked or disallowed by default, but does anyone know how to get around this.Thanks.

Hi,I just need someones advise on the adding a NAT exempt rle on my ASA 5520.If I add an exempt from an IP to another IP it works, if I add a NAT exempt for a group name to a group range it won't work.I am using the ASDM and I have created a group fo...