Network Security

Hello,I've been having issues with NAC AD SSO. The AD SSO service is started on both my CAS's in the CAS pair, and I do see that the Clean Access Agent attempts to perform AD SSO. But it fails and defaults to prompting for a local username and pass...

We're upgrading our network. As a part of the process we're replacing our 1750 Routers with a ASA 5505 with the latest software version 8.0.4.As far as ACLs, NAT'ing and routing goes so the config is the same on the new box.The problem is with a remo...

I am wanting to learn how to configure PIX's... particularly via CLI. I haven't dealt with firewalls and I want to learn. Can anyone suggest a good book with configs/labs that I can learn Cisco Pix CLI with?

Hello!I have a clientless sslvpn working as far as basic connectivity is concerned.And when I run the RDP service, the connection is successful and RDP works as expected but the web browser is stuck in limbo. I've attached a screen cap.Is anyone havi...

We have two VPN 3005 Concentrators. We setup as Load Balancing. I understand that each VPN Concentrator has a limit of 100 concurrent licenses. Does this license include IPSEC and site-to-site? How does VPN Concentrator count site-to-site license?...

Hello,I managed an ASA 5510 for a client, and they have roughly 100 remote access VPN users. They want to be able to monitor who is logged onto the remote access VPN at any time, but I do not want to give them access to the firewall to do show vpn-s...

I inherited a remote access VPN problem that I'm not sure how to resolve.I have a PIX 506E with a LAN address of 192.168.1.1/24. It is the default gateway for that LAN. I've configured remote access VPN so that clients authenticate locally to the P...

I am looking for a way to disconnect active client VPN users from either an ASA or Pix(6.3(5) code) when they reach their restricted hours. I am using ACS 4.0 and Tacacs+ to restrict time, but it won't kick off after users. Any insight would be appre...

All,I want to disable icmp on an ASA. I have icmp permit statements, but I'm wondering if this will affect any of my tunnels that are currently established. Any ideas if this is safe to do? I can't see why it wouldn't be, but it could be one of those...

I need to make WEBRdp work in WebSSL session. Issue seems to be an ActiveX issue. Are there any "fixes" to this problem?

Hi,Can anyone help me how to block the skype ports using the Cisco PIX515E (6.3 IOS)?Thanks and Regards,S.Venkataramna

Hi you all I have this pix 6.3 with interfaces Outside and Inside using the gb-ethernet interfaces.In the Inside interface I have added virtual interfaces for comunicating with the vlan contained in a switch. But yesterday I decided to activated a ...

Hi Currently we introduced a ASA5510 after our 1841 ADSL router. Users are complaining that after this migration internet browing got very slow and users are not able to update their anti-virus through synmentec web site.I went through the config. an...