Network Security

Hi all guru,I'm just curious if it is necessary to implement NAC Appliance & CSA in the same environment? This is because if i'm not wrong, i thought "Cisco Clean Access Agent" will be installed on Client as well? Hope to hear come feedback from all ...

Hello,I have two sites i have configured as below:VOIP -> Router -> Gateway (VSAT).See config (question afterwards)Current configuration : 2030 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecservice passwo...

Hi,I'm attempting an upgrade from 12.4-18 to latest 12.4-24T on a 1841 (my point for upgrade is to allow TCP out of order segments through the firewall which seems to have been introduce in 12.4-11T).The router uses NAT, and a PPP dialer for an ATM (...

Hello,If I read the documentation, I have to go to ACL Editor/Access Rules, and click "Log matches against this entry"However, my statefull rules are configured under ACL Editor/Firewall Rules, and there I do not have the option "Log matches against ...

I have two ASA 5520 and two ASA 5540. On the 5540 there are some site to site VPN's. I have upgraded all 4 of them from version 7.2.2 to 8.0.4 and suddenly all site to site vpn's could ping a database server (oracle) could connect with sql and run q...

Hi,I have a trick case with a ASA 5520 and a intranet in Internet Explorer. There is a picture, flash and document manager and the trafic get blocked when using IE, but not in Firefox. The intranet is using port 80. Anyone else seen something like th...

Hi, I have configured an ASA recently. After finishig of basic configurations, I tried ping from inside to outside interface and vice versa. But ping is not successful. I was getting ?????. I have tried "icmp permit any OUTSIDE" and "icmp permit any ...

Hello All,I'm fairly new on ASA world. I have a pair of ASA 5520 active/standby failover running version 8.0(4). I'm not sure if these issues that I'm facing are related to this software code but here are the issues:* CIFS access on the clientless ...

I have configured a VPN client connection in a PIX 506. The VPN client user gets a solid connection to the pix & an IP address assignment from the pool. But he is unable to connect to any address on the local network. John G.

I'm getting hundreds of triggers on signature 5748 Non-SMTP Session Start. When I put a block host on this signature I stop getting e-mail. Should this be considered normal traffic.

I've just been looking at the performance stats for the firewalls we have (Nokia) and the firewalls we are planning to get (ASA) and found the following: Nokia IP560FW - large packets 6.0 Gbps VPN - large packets 1.78 Gbps, AES256 CPS - 58,000 CPS Ma...

Hi, I'm working on a NAC L2 OOB wired design with 1 CAM and 1 CAS. I've not included failover to the design for the obvious financial reasons, and want to figure out the affect that the network would have in the case of a failure.1.)What would the us...

When I deploy Cisco NAC appliance, the main different between using cisco nac appliance with or without agent? I see Cisco NAC agent has two function: scan and remediation. If Cisco NAC appliance without agent, Cisco NAC server will scan device and r...

Unable to write mem. Says read-only filesystem.ASA OS is 8.0.4, user privilege level is 15.Thanks for any idea to get it read-write.