Network Security

We have two locations, both with internet connections and both with Cisco PIX/ASA devices providing the internet. The two sites have layer 2 connectivity. The primary internet for both locations is out of site 2. How can we change over to use site 1 ...

I need to have sessions created in port 443 (ssl/https) to time up between 15 and 30 minutes, can I get a little help in the commands to acomplish this.Currently my ssh timeout display 60 not sure if that is seconds or minutes ?

I have an old PIX 515E that was taken out of storage. We want to use it in the lab, but no one can remember the login name or password or IP. Is there a way to set to default and start over?

I want to upgrade a failover pix 535 bundle with 6.3(3) to 7.2 but I do not have enough memory in the flash, can anyone tell me how to go about this. Also the flash directory layout is not clear. If I do dir flash or sh flash, the name of the files a...

I have seen various threads that state something like "you can use IME to replicate/syncronise the AIP modules". However, I have NOT found out how to actually accomplish this. Can anyone point me to the documentation or give step-by-step how to repli...

ASA Version 7.2(3)Global NAT on outside Interface plus two Static PAT on the same outside address.But the static PAT don't work.Configuration as follow:(omitted)name 192.168.100.60 LAN_RDPname 192.168.100.100 LAN_SMTP(...)access-list inside_nat0_outb...

I have previously set up an ASA to authenticate VPN users against Active Directory in version 7.x Can a PIX running 7.x do the same thing?

Greetings- From time to time I come across an issue which I have to determine if certain web content is being blocked by the ASA. Having limited html knowledge, how can I determine for sure the content that is being blocked maps to the log message I ...

Hi all guru,I'm just curious if it is necessary to implement NAC Appliance & CSA in the same environment? This is because if i'm not wrong, i thought "Cisco Clean Access Agent" will be installed on Client as well? Hope to hear come feedback from all ...

Hello,I have two sites i have configured as below:VOIP -> Router -> Gateway (VSAT).See config (question afterwards)Current configuration : 2030 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecservice passwo...

Hi,I'm attempting an upgrade from 12.4-18 to latest 12.4-24T on a 1841 (my point for upgrade is to allow TCP out of order segments through the firewall which seems to have been introduce in 12.4-11T).The router uses NAT, and a PPP dialer for an ATM (...

Hello,If I read the documentation, I have to go to ACL Editor/Access Rules, and click "Log matches against this entry"However, my statefull rules are configured under ACL Editor/Firewall Rules, and there I do not have the option "Log matches against ...

I have two ASA 5520 and two ASA 5540. On the 5540 there are some site to site VPN's. I have upgraded all 4 of them from version 7.2.2 to 8.0.4 and suddenly all site to site vpn's could ping a database server (oracle) could connect with sql and run qu...

Hi,I have a trick case with a ASA 5520 and a intranet in Internet Explorer. There is a picture, flash and document manager and the trafic get blocked when using IE, but not in Firefox. The intranet is using port 80. Anyone else seen something like th...