Network Security

HI,I tried to configure remote access vpn on pix 515e with 8.0 pix software version through CLI with the following link http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008060f25c.shtml#cli I tried to connect to the vpn ...

I've got a really basic WebVPN configuration going and for some reason I cannot even get the portal to show. I keep receiving the following error in my syslog:%ASA-6-710003: TCP access denied by ACL from x.x.x.188/2856 to outside:y.y.y.14/443Here's m...

Good Day,We have an ASA 5550 v8 installed to provide nothing more than one to one dynamic nat in a large college residence hall. (One public IP is reserved for PAT in the event that the public one to one pool is depleted).As a college residence facil...

Hi - When configuring static NAT, the configuration guide states that you use the format 'static (inside,dmz)' where your connections are going to be initiated from the inside to the DMZ.Access-lists permitting, will this allow connections to be init...

I got an FWSM that I'd like to try using Trusted Flows Acceleration on. The docs say to use the service-acceleration command, but it just complains that I don't have the required license key. sh version says Service Acceleration is 'Disabled'. My ven...

Hi, when trying to connect two cisco routers through VPN, the only debug I have after activating it for crypto isakmp error, ipsec error and crypto engine is :*Apr 22 14:31:31.672: ISAKMP:(0:0:N/A:0): construct_initial_message: Can not start Main mod...

How to see the total flash size of Cisco C6500 FWSM..

Hi,what is a default value of spanning tree cost for data port on IDSM2 module?If we put commandintrusion-detection module 4 data-port 1 spanning-tree cost 1what is changed?

Hi,I've configured a active/passive cluster with a couple of 5520s. When making changes to the cluster, I don't worry about primary/secondary or active/standby, I simply use the ip address of the active ASA.Is this ok/normal/best practice? Does it ma...

I am using an ASA 5510 for both remote access and site to site VPN. Is there a way for the remote access clients to access the remote sites via the site to site tunnels? I have included the IP address range of the remote access clients in the crypto ...

Hello All,I have an ASA5505 appliance and want to create a dynamic access list like in this example (http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scflock.html)But I can't figure out how to do it on my ASA.Basically I want the...

My customer has a 5505 at home that is using EZVPN back to a 5510 head end. Behind the 5505 he has a laptop and a Cisco 'Soft' phone installed upon it. He can make calls but is getting only one way audio. People can hear him but he cannot hear anyone...

Hi,Please can someone help me establish why only wired connections (outside the network/over the internet) are able to connect to SSL VPN?If I use a wifi connection at any location outside of my network, then I cannot connect to my SSL VPN. I can onl...