Network Security

Dear Sir,I have a pair caption ASA(A/A) connected to a pair of 3560 switches. The ASAs is for SSL VPN access from Internet only. We have other firewall outside to serve the firewall function.1. Do I need to put the local servers behind the ASAs?2. Do...

Hi,i have strange problem when i want to add ips4215 to csm.in device discovey proccess every thing goes fine and device get detected by csm but with one warning message that indicates witch i havent any license file on ips witch is true(i have not a...

I replaced my NetGear FVS338 with ASA 5505 on my web server network. So now I have ASA 5505 on both of my networks.Exchange server: 192.168.0.1Web Server: 192.168.1.10Site to Site VPN is working.RDP (Remote desktop) is working.AVG Virus software mana...

We terminate vpn users on an ASA. That is working. The problem is running the remote users through the NAC appliance while not checking other traffic. We have tried restricting all vpn users to a vlan to layer 3 with PBR. None of these options seem t...

We have a site to site vpn established, however to initiate the tunnel the remote endpoint has to ping our local endpoint for the tunnel to negotiate. However, I can not initiate the tunnel if it drops by pinging the remote end from the local end. An...

Hi,We have a couple 5540s (running version 8.0(4)) in vpn loadbalancing mode. Frequently we get the following log messages:%ASA-3-713128: Connection attempt to VCPIP redirected to VCA peer x.x.x.x via load balancingIn the system log messages manual i...

I have a new ASA5510,,that cannot and will not allow interface Vlan additions or configuration...when i type Conf t and then interface ? no vlan keyword shows up..I have updated IOS etc...the only thing I can think of is that they sent me a Failover ...

Good afternoon:I have a Cisco IPS 4240 sensor. This appliance is generating alerts with the network 0.0.0.0 as attacker and victim.Example:Severity informationalApplication Name sensorAppEvent Time 02/20/2009 12:26:19Sensor Local Time 01/20/2009 12:2...

Previous posts said to use "clear configure <acl_name>" but that command doesn't exist in 8.04. Is there a new command?

I have a tunnel established site to site and the only way we can get it to negotiate is for the ISA site to ping the ASA site. At that point Im able to ping his internal and vice versa but after a few minutes of no activity the connection drops and h...

Good afternoon,Anybody knows about a solution like "Static Route Tracking" to use in a ASA 5520?I tried to use track, but ASA5520 didnt recognize this commandI need something like this:route outside 192.168.1.0 255.255.255.0 10.10.0.1route dmz 192.16...

Hello,We have an ASA 5510 running in a DMZ that is the DMZ firewall for our wireless network. We have added a new VLAN to the network to accomodate more users on the wireless network. This new VLAN for some reason cannot receive IP addresses from the...

How do I receive the alert message from IPS AIP SSM10?