Network Security

Hi All,In middle of configuring a Pix 501 for VPN. I have running a few VPN's Site to Site and can terminate a Client to Site VPN with no issue. I am having problems getting the Client to Site to initiate a User Username and Password Challenge when V...

In my internal network a PC need connect by vpn with one peer in external network for access to aplication in other company.The tecnical support say me that i need configure access to ip external.IPSec ESP (IP protocol number 50)ISAKMP / Oakley (IP p...

Hi All, we are using ASA 510 as firewall and there is sonicwall behind the ASA 510 as VPN device. I need to allow IPSec traffic through ASA to terminate to Sonicwall. if there is any document to show how to configure this scenario, I'll be very appre...

This morning, as a test, I did the following:ASA internal ip address: 10.20.0.1Workstation address: 10.20.0.50I set the workstation's DNS server as 10.20.0.1In the ASA I did:static (outside,inside) udp interface 53 4.2.2.1 53 netmask 255.255.255.255I...

Looking for link on how to upgrade to fwsm v4. Cannot find any documenation on cisco.comThanks

I'm using Secure CRT and tried to SSH toA PIX 506 and got "Protocol mismatch. Required version is 2.0 Received was 1.5-Cisco-1.25" Now I'm trying to use the ssh client from a router and I'm trying to get the syntax right for version 1.5Thanks

Hi,Any one can help for creating site to client and site to site VPN in CLI mode.Regards,

Dear AllI have 2 ASA in failover mode Active/Standby. When the failver becomes up I saw the below message:Failover LAN became OKSwitchover enabled State check detected an Active mateBeginning configuration replication from mate.vPif_getVpif: bad vPif...

I am running NAC 4.5.1. Is there a way if a client fails one of the requirements to redirect them to a remediation web page?

Hi All,Hope you can help me with my little problem. I am new to Cisco and I started to configure my Cisco ASA but I am unable to ping External interface address from Internal hosts.What I wanna do is to nat internal address with the external interfac...

Hi all,Basic questions before the details: Does an explicit deny on an ASA 5510 7.2(2) send a RST packet back to a SYN scanner? Why does it not just drop the packet? Can I make it do so? Do I understand what I'm doing? Details: Got a client running h...

I figure it's not possible but I'm asking anyway, is it possible that when a standby unit takes over and the active becomes available for the active to somehow preempt the standby and take over in a similar fashion to HSRP?

Dear All,I connected one IPS (4240) inline between 2 Firewalls and 2 DMZ switches as following;FW1 e1---IPS 0/1, FW2 e1---IPS 0/3,DMZ1 Switch1 fa0/1---IPS 0/0, DMZ2 Switch2 fa0/1---IPS 0/2.I made 2 Pairs;PAIR 1: Gig 0/0,0/1, PAIR 2: Gig 0/2,0/3.I ass...

Hi all,There's something wrong with my NAT rules, this much I know, but rather than bang my head against a wall, could someone throw a light on what i've done wrong here?It's a mix of sdm and sample configs that has got me to this point. The VPN clie...