Network Security

Hi,I just need someones advise on the adding a NAT exempt rle on my ASA 5520.If I add an exempt from an IP to another IP it works, if I add a NAT exempt for a group name to a group range it won't work.I am using the ASDM and I have created a group fo...

Dear all,i spoke for a friend which problem i heard in the last days.he installed a new location and the vpn is woking well, from the cleints in the local lan he can connect the tftp server in the headquater. but when he is on the asa via ssh (connec...

Dear All,I would like all of you to help me to solve the problem as below:On ASA i had Outside,Inside and DMZ.i had one webserver in DMZ and i had 2 application server in Inside( one primary and other one Bakcup).so i want to allow some port from DMZ...

we have a main site that contains (1)CAM and (1) CAS and 250 users. we have 5 remote sites that connect to an ASA 5520 via DSL point to point VPN connections. There is no internet at these sites locally, they all access the internet through the main ...

I am trying to find out if CSM version 3.2.2 will support Sensors running 6.1 and up ?? At this time CSM 3.2.1 cant be used to update sensors to 6.1 and up.Thanks,

Hi all,I think i know the answer to this but i will try anyway, i support a pix 506e ver 6.1(4) (yes i know its old), which has been fine for what it needs to do for the last several years. However i now need to open a range of ports to a host on the...

At headquarters we have 2 routers. We have a corporate router connecting 10 sites via a public MPLS network for core services. Any traffic not destined for any of our sites gets routed to our internet router.We'd like to take a site off of our public...

I have a ASA5505 with mostly factory default configuration. Its license allows only two vlan interfaces (vlan 1 and vlan 2). The default config has interface vlan 1 as inside (security level 100), and interface vlan 2 as outside (security level 0 and...

I'm re-posting this, because it seems to have died out on answers. I've also attached my configs:Please, I've been working on this for a few weeks now, and have had to learn everything pretty much on my own, because no one can seem to give me an answ...

Hello, Have a PIX 515E with a subnet connected to the DMZ port. All servers on the DMZ port, lets say 192.168.1.0/24 network have arp entries to any server on the 192.168.1.0 network with the MAC of the PIX port. Does this mean that and intra-server ...

I am looking into getting a 5505 for a client who has two ISP Internet connections. Do I need the "security plus" license since I need three FULL VLANS (ISP1, ISP2, and inside LAN) and not the two + one-sorta-functional VLAN that comes by default on ...

I'm monitoring our Cisco ASA via SNMP.So far I found :- Total number of RAS sessions : 1.3.6.1.4.1.9.9.392.1.3.1.0- Number of IPSec VPN tunnels : 1.3.6.1.4.1.9.9.171.1.3.1.1.0- Total number of SSL Sessions : 1.3.6.1.4.1.3076.2.1.2.26.1.2.0I'm looking...

I have 2 unit ASA 5520 with AIP-SSM-20 for front-end and 2 units ASA5520 with AIP_SSM-20 for back-end.I also have 2 units catalyst 6509. How should my design looks like.

IDS is not generating events. Following message shows up in the event log.evError: eventId=1230128220192233058 vendor=Cisco severity=error originator: hostId: SI-IDS01 appName: mainApp appInstanceId: 397 time: Feb 10, 2009 04:51:02 UTC offset=-300 ti...