Network Security

HiI have branch connected to main office with fiber so now it connected with vlan but I want to configure IPsec for this I have to change the ip adress and add new one I mean I use one ip subnet so if I am configure IPSec I must use 2 subnet I wan...

Hi, I have two networks 1&2. Both have separate internet connections . ASA1 in network1 has three interfaces (inside/192.168.1.0/24) dmz (172.16.1./24) and outside (56.*.*.*/28). Its DMZ has connectivity to a layer 3 switch of second netwo...

Hi all,We have multiple context and need to send all Context log to one syslog server.For the context on the same network as syslog server, we can collecte log without problem.For all other contexts, no log reaches the server.We have put "logging hos...

All,When you use an AA or AS configuration, and these devices connect to the internet, do you have to burn two public IP addresses? Do they look like one address with a virtual IP?Thanks,John

Hi, I've been working on a VPN L2L tunnel between ASA5510 and Netscreen SSG for a month now with no success. The Netscreen is the remote VPN device and I have no control whatsoever on it. I, however, was able to get their config. Hope someone here ca...

Hi all, Another DMZ question I'm afraid. I'm trying to achieve the following and any assistance would be great.I want my Inside to PAT'd to the Outside and DMZ, I also need my Inside to able to access the DMZ via external (212*.*.0) as well as the i...

We are currently using CSA to prevent writing to USB drives by using "@removable" and defining a file set for USB (directories matching @ removable).This has caused a problem when using App-V-formerly SoftGrid to virtualize Adobe Eeader. App-V uses a...

I am wondering if it is possible to have 3 virtual external interfaces for 3 ISPs and configure 3 static PAT statements for one server on an internal vlan. The 3 default gateways are the 3 routers connected to the ISPs. Is there a way to get the fwsm...

We are looking to move our video conferencing to an IP based solution. I would like to firewall this connection as well as perform some sort of QOS that ensure 2 - 3 Mbps are guaranteed for outbound and inbound video conferencing.The ASA 5505 would h...

Our remote users already use AnyConnect to access our corporate network when offsite. We're in the process of implementing split tunneling through group policy, where more trusted users can have non-work traffic go directly to the internet, but less...

Problem Details: Hi,I've recently migrated from PIX to ASA5540 Version 8.0(3)6. On the new ASA we've setup L2L tunnels andRemote access and everything seems to be working fine. However, we have a radiologistgroup who are using VPN remote access via t...

I have a vpn setup between a Cisco ASA 5505 and a CP NGX R65. The CP firewall is the remote side. The primary problem is that when a phase 1 rekey occurs it will often fail. Sometimes after a few hours it will come up on its own. At other times I...

I'm having the most frustrating problem and was hoping for some assistance?I'm fairly new to the Cisco ASA. We recently had an ASA 5510 installed at our corporate office to replace our old VPN Concentrator & PIX 515e. At our remote sites, we've had a...

Hello,I try to do a VPN between ASA 5510 and a router 871.I have enable the debug on the router 871 and I have these errors.Router 871#*Mar 3 05:42:32.971: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 10.10.100.3, remote ...