Network Security

Hi!Looking for some input on some design options for NAC with a wireless deployment since OOB and IB are now both options.In a campus environment of up to 300 wireless users, in-band seems good so that we can have one SSID, but restrict a user login ...

Hello,I have inherited a cisco catalyst 2900 series and am trying to reset it to its factory defaults.I don't have a password for it and don't use PC but have a Mac OSX.How would I go about in reseting the switch to its factory defaults, and how do I...

The customer's proxy server is MS ISA. After http and https proxies are added on ASA, will the end users have to configure their web browser to use proxy? or they don't, the ASA just intercepts the web traffics and redirect them to proxy server?Thank...

I have a VPN set up between an 871 router and an ASA 5505. VPN tunnel is up and I can pass traffic between the LANs. I can hit the phone system from the remote site (behind 871) as well as the main site via VPN tunnel. But, none of the phones will re...

I placed a network 10.71.180.128/25 (VLAN71) behind the inside interface of my ASA5505. I have a server on this network that i have to access from both the internet and from inside my network. I understand i can create a NAT rule to access the insid...

Is it a best practice to use the PIX interface as the LAN gateway ?We use to have our cisco 3845 gi0/1 as the LAN gateway before a re-design and now, the LAN responce time is really slow, could this be a cause of using a PIX as the LAN gateway ?Than...

I have an issue that when users connect to my ASA 5520 via SSL VPN it takes from fifteen seconds to three minutes to open up small Microsoft Word documents, it also takes a long time to save changes. Users also reporting Word crashes when on the VPN,...

Hi,on last Friday, I saw this line in ASA logs2009-02-20 08:52:57 Local4.Critical 1 %ASA-2-106001: Inbound TCP connection denied from <SPECIFIC PUBLIC ADDRESS>/80 to <ASA INSIDE HOST>/32622 flags FIN ACK on interface outsideThis in not the only line...

I have a couple of ASA clusters. To make the firewall policy easier to read I use the "name" command to associate names to IP's and then use the names in the firewall rulebase. Whenever the ASA sends logs to syslog it is sending that actual text na...

Ok I can only think that my peer is using some sort of load balancing or something. But basically if you notice the info below for some reason there are 2 IPSEC flow's for each network. The data session dies when 1 of the IPsec flows timer expires un...

Hi,Our Data Centre has two connection into it and we have an ASA5510 on each connection with an 1800 router between them and the servers. We have around 15 EzVPN (nem) connections that terminate on one of the ASA's that our remote sites use to access...

Can I use the same AnyConnect client I use to connect to my ASA to VPN to an IOS Router.

Hi All,Somehow my AnyConnect client has stoped working on Vista x64 Ultimate. It works fine on any other system (XP, Vista Home, Vist Business, etc.) I'm using version 2.3.0254I get this message when I try to connect.The VPN client was unable to succ...

We are currently using the Citrix Metaframe access via our VPN Clientless SSL Portal. Works, but the question we are now being faced with, is there a way to call a specific Citrix App?It appears the only parameters one can pass is SSO, Color, Vert a...