Network Security

If I am configuring an ASA to pass IPSEC vpn traffic, and I don't want to NAT anything traversing from the inside out, nor am I NATng anything coming in, should I be using NAT exemption vs Identity NAT?nat (inside) 0 0.0.0.0 0.0.0.0 oraccess-lis...

I have following firewall:Firewall Service Module 3.2 for 6500 and 7600, 2 free VFWsIt shows that I can create two Virtual Context. Would it include the admin context or not? If not then can I create three individual firewall?

Hello, I have clients that connect to pix with a Cisco vpn client.And I reach to change the pix with another product; first I want to know if there is any difference in security between SSL and IPSEC? How to choose the most efficient solution?Is ther...

anyone know how I can set-up manual dhcp bindings on an asa 5510?

Hi,I'm trying to write some specific ICMP rules but finding it very difficult and don't understand where I'm going wrong.I have the following rule with my access-listaccess-list INSIDE-ACL extended permit icmp host 10.101.133.20 10.101.196.0 255.255....

I know this is possible with ASA and VPN3000, but I am having trouble getting it working with IOS SSL.User SSL's to the ISR Router (2821 Ver 12.4.20T), Authenticates and creates a Tunneled Connection. Connectivity to the Internal LAN has been verifie...

I have a webserver that that has a portmapping from the outside x.x.x.x port 80 to a dmz address y.y.y.y port 82. Works fine. I want to have the outside x.x.x.x port 80 mapped also to a dmz address v.v.v.v port 83 when x.x.x.x is taken down to displa...

Hi, all,I have a simple yet weird problem I could not explain. Corp VPN gateway is ASA5520 running 7.2 code, branch VPN gateway is ASA 5505 running 8.0 code, I created a simple L2L IPsec between the two to protect communications between HQ subnet (10...

Hope you can helpI have a ASA 5520 and was testing vpn configuration using the packet tracer in asdm. Due to a typo I simiuated a land attack (ie same source and destination address). The ASA then blocked connections to some ip addresses (other servi...

Hi,I have transparent multiple context setup on FWSM. all are fine. What I'm trying to do is, I want context A be able to talk to context B and vice versa but not to context C. Any idea?ContextAContextBContextC

Hi,I migrated remote users from the MS PPTP to Cisco VPN Client 3 months ago. Since then, Remote users are getting "dead air" calls when they dial each other's extension. When remote users dial someone's extension at the company's 12 locations, every...

Good night guys,I configurated two ASA and the vpn didnt work, what is wrong?Here is the vpn configuration and the resultscrypto isakmp policy 10 hash md5crypto isakmp policy 10 authentication pre-sharecrypto isakmp enable outsidecrypto map mymap 10 ...

I have ha profiler running with ha cas (v4.5)and ha cam. I am seeing only 2 profiles when I look at the profiles. I only see APC UPS and Unknown. Does anyone have any ideas on why I am not seeing any other profiles? I am using an IP Phone to test...

Hi ALL,I have a quick & silly question.My switch has the IOS (tm) s72033_rp Software (s72033_rp-IPSERVICES_WAN-M), Version 12.2(18)SXF11, RELEASE SOFTWARE (fc1)and ROM: System Bootstrap, Version 12.2(14r)S9, RELEASE SOFTWARE (fc1)Will this be compati...

hi,is there a default value for tcp connection time out on ASA? I have turned off tcp timeout on my ASA, but I still have stiration the idle connection between client and server (2h idle) are droped (oracle server send ACK with RST flag)