Network Security

Hi,I have a Cisco ASA 5520 and have just added a NAT:static (inside,DMZ2_Regional) 192.168.21.1 192.168.21.11 netmask 255.255.255.255Then applied to get this message:OK] no static (inside,outside) x.x.x.83 192.168.60.11 netmask 255.255.255.255[OK] n...

Does anyone know if there is any material out there that has pre build regular expressions? I can't seem to figure these things out. I'm wanting to block P2P traffic on our network but the ASA only can block Gator and Kazaa by default.

I would like to know whether there is any best practices document for security hardening of ASA with CSC-SSM/AIP-SSM, FWSM, IDSM & ACE Modules.Regards.

Hello everyone,So I've been looking through the Cisco website trying to get information about Cisco NAC (at the request of my boss, the IT team leader). Unfortunately, all the information about NAC on this website is geared towards supervisors and p...

Hi All:I was told that when a host is in Audit or Learn Mode, ClamAV is turned off as well. I was also told that I could not have a 3rd-party AV product installed on the same host as CSA (Cisco would not support it). This seems to make Audit/Learn Mo...

We have a cisco 3030. We have a vendor that needs a static addresses asigned to 25 different devices. I have tried to setup groups with an address pool of one address, but the 3030 will not allow one address in the pool. Am i missing something? Is...

We have an ASA5550 (ver. 8.0.4). We setup Split-tunneling and NAT-T. For some reasons, the Cisco VPN client keeps disconnected every 30 minutes with the following error message: Secure VPN connection terminated by Peer. Reason 433: (Reason not sp...

Hello,We have a client-server VPN with a cisco PIX 515 as the server. The authentication is integrated with Active Directory, so the user have an AD account. The problem arises when password in the AD expires and users have to change it, and since t...

How will be the scenary of NAC appliance and NAC Framework in a topology WAN, for example i have my core and remote office and I want to implement NAC for all remote site and central site.which will be the solution?Best Regards

I have a problem in a router c2811.This router has an Isdn access to a central site using a Bri interface (wic-1b-s/t-v3).The router has the following IOS: c2800nm-spservicesk9-mz.123-8.T8.bin.This same router has an Internet access using an Adsl in...

Want to say thanks in advance -thanks.I'm trying to allow access from my guest network (inside-guest) to particular servers on my inside network. The guest network is using 192.168 network.I'm getting the error below.--Config already in place---stati...

Hi everyone, this is a problem I have been working at off and on for a long time. Before I waste anyone's time posting my config I'll ask if what I want to do is even possible.I have a 2811 router running IOS 12.4(22)T. I have Fa0/1 connected to the ...