Network Security

I have CAM and CAS failover bundle. 2 CAM and 2 CAS. I am purchasing a third-party Trusted CA. How many certificates will I need to purchase? Do I need 1 cert for all the servers, 1 per F/O bundle, or 1 cert per server?And can I use a private IP to ...

Running ASA v8.x. I'm trying to save the run to a TFTP server that's connected via a VPN tunnel. I have "management-interface inside" set up so I can get remote access via ASDM, but I'm not sure how to get TFTP to work. I defined the tftp client i...

Hi I'm having trouble trying allowing specific access i.e smpt, http from clients in vlan 1 to servers in vlan 2.* Both Vlan's access the internet with Dynamic NAT. * Both Vlan's currently use the same security level* nat-control is enabled with "sa...

Hi,I'm taking over admin of an active/standby pair of ASAs running 7.2(3) with two contexts running in transparent mode.Apparently there is no admin context configured on there. I need to remotely access system execution space so will need the admin...

I am beginning to run out of address spaces and I am looking at getting another range. I would like to create sub-interfaces but I am running into one problem. When I move the interface "outside" interface to one of the subinterfaces anything appli...

hi,i have 16 global IPs - i.e. 80.80.80.112 / 255.255.255.240ASA IF:eth0/0 - inside - 10.10.10.2eth0/1 - outside - 80.80.80.114eth0/2 - DMZ - 172.16.2.1eth0/3 - not usedGW Provider: 80.80.80.113ASA-OUTSIDE-IP: 80.80.80.114 (IP used to surf the Intern...

Hello - I sucessfully used the IDM to upgrade the IDS 4215 using IPS-K9-r-1.1-a-6-0-5-E3.pkg. But now how do I force the IDS to use the new code? It show in the 'recovery Partition' .. tnksMainApp 2007_FEB_02_15_58 (Release) 2007-02-0...

Hi,I have configured ssl vpn on asa5520 running 8.x software. I have created local user name and password for ssl vpn users. When i am giving username and password to login that username and password allow me to login for only one time when i am tryi...

Dear All expert,I would like to ask you some question and the same time i had issue too.i had ASA5510,i had interface Inside,Outside and DMZ.On Inside i have two server(primary and bakcup), so i want to allow some port from DMZ to inside( i mean i wa...

Hi,I am having some weird problem. we have configured access list for the applications on ASA outside interface. It is working also but I am not able to see any hit count on the access list. It increases only by one when a new session is initiated f...

Our Client is having 2 ASA firewalls ( 5540 ) along with AIP-SSM modules in it . They are configured for Failover . The OS of ASA is 7 and the OS of IPS is 5.0 . I have read on Cisco website that Password recovery cant be done on IPS modules having 5...

Hopefully someone can help with a termination issue I'm having with a PIX-515e firewall; software version 6.3.4, pdm version 3.0.2.We're getting constant vpn termination errors (reason 412 and 413) from a group of users at one location. I am by no m...