Network Security

PBR is not possible on ASA then ASA have "route-map" command for what?

A client has asked me to configure PAT on their PIX to forward 3389, 80, 443, and lotusnotes ports to an internal IP. I have done this same configuration on other boxes approx 150 times with no issues but for some reason this one is killing me. Can...

Hi,I am trying to access the email server from internet by writing the real ip (210.56.C.D/mail) on web browser but unable to access the server.Attached is the topology as well as the configuration of PIX and Router.I shall be thankful if anyone help...

Hi AllI am attempting to use a perl script(via cron) to back up all context configs from the ASA to a tftp serverDue to the limitation of the ASA CLI, I can not back up all context configs simultaneously. As such I believe the script has to log(ssh)...

Can the PIX firewall licenses be swapped interchangably between two different models?i.e. license from PIX 515 be ported over to PIX 525.

We have a pair of 5520 ASAs in A/S. We have an old Cisco VPN solution which needs replaced. Please keep in mind this is NOT a sales opportunity, considering the financial climate need I say more. I am currently an advocate of having our existing A...

I have one question about managing bandwidth by NAC: If I configure NAC inline, all user's traffic must go through NAC. I configure every users 64kb. Now, I can configure every users connect to Intranet with 10MB and connect to Internet 64 kb. I can ...

Hi,I have a remote ASA device on which I have an IPSec tunnel established. I would like to manage it using SSH though the IPSec tunnel. It seems however that I cannot SSH to its "inside" interface through the IPSec tunnel... The only thing I can do i...

So say i have 4 vlans in a network, 3 of the four work perfectly, and the last one works as well except the last server on the vlan will not talk outside of the vlan. say its ip is 11.11.13.244 255.255.255.0 plain and simple, all the other servers wo...

Has anyone had experience monitoring a 3750 switch stack with whats up gold? Usually you monitor for the ip address of the switch, but with a stack if one switch member dies this is not detected.Thanks

Hi Everyone.We have discovered a performance impact on the SSM-CSC module. This occured after about 1 month of service. Some websites are now extremely slow, or not possible to access due to timeouts. Most other websites are experienced as “slower ...

Hi,I have a number of Pix 535's but i dont seem to be able to determine which slot my interfaces a plugged into ?It doesnt seem clear how to determine this, and of concern to me is if i need someone to work on an interface physically i wont be able t...

Customer has the same remote networks as some of my local networks. What is the best way to apply Nat accross the tunnel? 172.16.x.xlocal 192.168.0.0Remote 192.168.0.0172.17.x.xlocal 192.168.0.0Remote 192.168.0.0 LAN on both sides has 192.168.0.0 /24...

I have a 3745 switch running IOS 12.3. I would like to NAT the inside IP address 192.168.1.70 to IP address 125.255.251.1 only when it is communicating to IP address 149.100.114.1. For all other IP addresses that it will be communicating with, I DO N...