Network Security

Reposting in a new thread since the old one seems to have died...I'm migrating from a PIX 515 to an ASA 5520. The config was created using the PIX to ASA migration tool. The ASDM Packet Tracer shows outbound traffic failing due to NAT.Confignat (insi...

I just discovered something that I don't believe should work but it does. I always thought if you were going from a lower to higher security that you required static entries and access list however I discovered the followingnat (dmz) 0 172.16.1.20 25...

Hi,We're in the process of migrating over to an ASA 5520 from a Pix 515. We've made several attempts and so far none have been successful.I've used the pix to asa migration too and combed thoroughly through the resultant config and everything looks g...

Is it possible to create the following design:1) Multiple Contexts: Customer Internal Network; Business Partner A, Business Partner B2) Customer net can talk to Business Partner A and B (from the inside)3) Business Partners can't talk to each other.I...

Hi,I have the following setup : TACACS --- LAN --- ASA1 ==== IPSec === ASA2 --- SW1 In my configuration, I can manage the remote ASA (ASA2) on its inside interface, through the IPSec tunnel with SSH. For that, I entered the command "management-access...

Hello We are running a Cisco ASA 5520 and using webvpn with a Verisign SSL certificate.Anyway the certificate expires in a few weeks and I'm not sure how to renew this. Does anyone know if there is a document expiring how to renew a Verisign certific...

If I have a pair of ASA firewalls terminating several IPSEC vpn L2L connections, and these firewalls are configured for failover, what happens to the active tunnels if a failover occurs? Is there a disruption or is it transparent? Finally, is there a...

Hi. I have a new site VPN between a ASA5510 at head office and a Pix501 at a branch office. When I reboot the 501 the VPN comes up fine (i.e. I can ping devices at both sides). However, after approx 10 mins the connection drops and doesn't come back ...

Hi,Please find attached the log I am getting on my ASA.What is the best practice to resolve these logs.In attached the file 122.160.x.y is the Public IP(ip on outside interface) on which my inside network is natted. My network chokes/goes down freque...

isn't there a cisco tool for decrypting "user level" passwords?thanks, kevin

I am hoping someone can help me figure this out. We have an internal client which needs to be accessed from the Internet through our PIX Firewall. The client has an internal IP address in the range of 192.168.x.x (static), we also have an external ad...

We purchased an RVS4000 to allow 3 different SBS domains (172.16.x.x, 172.17.x.x, & 172.18.x.x) to use 1 internet connection (168.192.1.1) However, we are lost as to how to set this up?

I need to configure an IPSec over TCP on my ASA 5510. Is it possible?? where can I find some information??Thx