Network Security

I'm having a problem where I can only ping certain IP addresses across the VPN tunnel. I can ping most of them but not all, the CCP has added a whole bunch of duplicate configuration and I suspect that may be part of the cause. Attached is the router...

I know in an ASA that I can allow certain IPs/Subnets to completely bypass url filtering. Is this possible in IOS based URL Filtering? Can i set deny entries in my Java List to do this?Thanks in advance!

HelloIf i have ana ISA(proxy) and an ASA for an internet setupWhat are the Disadvantages/problems that would show if the ISA server is attached to the ASA's inside interface , and there is no direct connection between the ASA and the SwitchThe Connec...

Hi all, can anyone tell me what extra functionality I get when I use an IPS in the firewall ?

I'm using ASA as a VPN concentrator on HQ site. I've used Public IP addresses on both interfaces,Inside and Outside interfaces. I've had 4 branch sites connecting to HQ using Site-to-Site VPN. How can I do load-sharing with those 2 interfaces on ASA?...

Hi I am trying to inpliment IPSEC/L2tp for Windows XP and 2000 as per the below cisco documentaion but i am getting error 800 please guide me how to impliment IPSEC / L2TP in ASA-5505, i implimented in PIX its working fine . please guide me i am i do...

I have the mgmt0/0 port set up on my ASA for mamanement-only. (ip address 192.168.1.1/24) All works fine if I connect to it from a PC on 192.168.1.0/24 range. If I try to connect from a PC outside this range I cannot connect. The ASA tries to send th...

All,If I have inside traffic going into the DMZ, would my static nat look like:static (inside,dmz1) 10.0.0.0 10.0.0.0 netmask 255.0.0.0We have several subnets of 10.100.0.0, 10.200.0.0, etc.Thanks,John

I am new to the FWSM and am just getting it installed in our lab for some testing. It is loaded with 3.2(2) and I see the 3.2 is up to 3.2(11) now, and there is also 4.0(3).Is it recommended to move to 4.0(3), or should I stick with 3.2(11), which is...

Anyone know what changed in the new IOS 12.4(24)T for vpn client connections? I upgraded from an older 12.4 release on a 2811 and now the IKE security negotiations fail. The vpn client is version 4.9.01 Thanks for the help

All,If I have a host of 5.5.5.2/30, I would either have to create a name for each host or create an object group since it's lets you create odd masks. I noticed in the ASDM that you have the option to create any mask you want when creating names, and...

Hi All, I have ASA terminating the VPN clients (remote access or L2L vpn), and if I have SSM installed on ASA (to act as IPS), will this ASA successfully be able to perform real-time spam/virus filtering even for the encrypted traffic that is coming ...

Hi gurus!Not sure if it is right section to ask this question but it is generic one that has to do with the ASA.This is the problem. The ASA is connected to Shaw ISP via a cable modem. We are assigned 4 IPs addresses one of them is physically configu...