Network Security

The customer's proxy server is MS ISA. After http and https proxies are added on ASA, will the end users have to configure their web browser to use proxy? or they don't, the ASA just intercepts the web traffics and redirect them to proxy server?Thank...

I have a VPN set up between an 871 router and an ASA 5505. VPN tunnel is up and I can pass traffic between the LANs. I can hit the phone system from the remote site (behind 871) as well as the main site via VPN tunnel. But, none of the phones will re...

I placed a network 10.71.180.128/25 (VLAN71) behind the inside interface of my ASA5505. I have a server on this network that i have to access from both the internet and from inside my network. I understand i can create a NAT rule to access the inside...

Is it a best practice to use the PIX interface as the LAN gateway ?We use to have our cisco 3845 gi0/1 as the LAN gateway before a re-design and now, the LAN responce time is really slow, could this be a cause of using a PIX as the LAN gateway ?Thank...

I have an issue that when users connect to my ASA 5520 via SSL VPN it takes from fifteen seconds to three minutes to open up small Microsoft Word documents, it also takes a long time to save changes. Users also reporting Word crashes when on the VPN,...

Hi,on last Friday, I saw this line in ASA logs2009-02-20 08:52:57 Local4.Critical 1 %ASA-2-106001: Inbound TCP connection denied from <SPECIFIC PUBLIC ADDRESS>/80 to <ASA INSIDE HOST>/32622 flags FIN ACK on interface outsideThis in not the only line,...

I have a couple of ASA clusters. To make the firewall policy easier to read I use the "name" command to associate names to IP's and then use the names in the firewall rulebase. Whenever the ASA sends logs to syslog it is sending that actual text name...

Ok I can only think that my peer is using some sort of load balancing or something. But basically if you notice the info below for some reason there are 2 IPSEC flow's for each network. The data session dies when 1 of the IPsec flows timer expires un...

Hi,Our Data Centre has two connection into it and we have an ASA5510 on each connection with an 1800 router between them and the servers. We have around 15 EzVPN (nem) connections that terminate on one of the ASA's that our remote sites use to access...

Can I use the same AnyConnect client I use to connect to my ASA to VPN to an IOS Router.

Hi All,Somehow my AnyConnect client has stoped working on Vista x64 Ultimate. It works fine on any other system (XP, Vista Home, Vist Business, etc.) I'm using version 2.3.0254I get this message when I try to connect.The VPN client was unable to succ...

We are currently using the Citrix Metaframe access via our VPN Clientless SSL Portal. Works, but the question we are now being faced with, is there a way to call a specific Citrix App?It appears the only parameters one can pass is SSO, Color, Vert an...

I have IPS enabled on interface g0/1 within my Cisco 3825 router. I have a Dell 5324 switch connected to my servers that connect to g0/1 of the IPS Cisco 3825 router. If that Cisco 3825 router loses communication with the Dell switch, will IPS restar...

I have an MPLS network, with a main site running hosted applications [10.10.x.x/21, Router - 10.10.0.254], and 3 other sites [10.11.x.x/21, 10.12.x.x/21 and 10.13.x.x/21; GW for each router at each site is 10.11.0.254/21, etc.].I have the 10.10.x.x/2...

Need advice on how to block external pings to the outside interface on ASA 5550 running version 7.2(1). I created ACEs and applied them to the outside interface but I'm still able to ping. Any help would be most appreciated.