Network Security

So I was poking around my ASA5505 today and noticed the port I have connected to my 1242AP had a ton of switch ingress policy drops. ASA's been on for about 10 days but there are around 12 billion of them.I read something about the vlan interface nam...

I have a need to disable the stateful firewall in the Cisco vpn client when users connect to our ASA. Is there a way to do this from the ASA? I know there's a client-firewall option under group policy, but the only thing I can do is none, opt, or req...

If I have an interface that's addressed like:Inside: 192.168.2.1 255.255.255.0DMZ: 192.168.1.1I know that I don't need a route for the inside network, but the ASA allows me to put a route for the DMZ:route DMZ 192.168.1.0 255.255.255.0 192.168.1.1I k...

Head office with one Router (2851) connected to the LAN and several site-to-site VPN on the outside Ethernet to the branche offices.I need to improve a kind of High-Availability ONLY on the head office.I added a second Routers (2811) connected with H...

eg: outside interface traffic usage ... updated every second instead of default (10?)

Hi,Would it be possible that a QoS tagging is lost as it traverses between directly connected interfaces of two switches.What possible reason a dscp marking is stripped on the ingress interface?Thanks.

Hi all,I'd like to ask a help.I have a Lotus Notes Mail Server that is at Inside Network. I am able to receive any email and make MX queries for any domain from Lotus Notes Server. However I unable to send email for any destination.Someone know what ...

Hi, I have a FWSM in trasparent mode and some routers in "not protected" vlan, between FWSM and MSFC. For the server in the "protected" vlan, is better to have only the default route to the MSFC or to have some route specific entries to the routers ?...

Hi Experts,I would like to seek your help regarding my problem with ASA5505. My setup is:Internet--ASA5505--Switch--Server/PC.When the server is directly connected to internet using 2 lan card, yahoo mail can be received thru MDaemon mail server.But ...

Hi All,I have CISCO ASA with IPS20. I am installing the IPS. Initially I registered the IPS. I didn't received PAK along with the Device. I registered online. It is okay now. Do I have to renew this every year to get the signatures, like how we do fo...

Hi,I hope you can spend a little of your time helping my fix this lab scenario.What my goal is for my laptop on 192.168.3.20 (inside of pix) to be able to connect to 10.100.0.61/27 which is a loopback on my pretend New York router.I have the followin...