Network Security

Per cisco documentation:"IP Verify Reverse-PathEgress filtering verifies that packets destined for hosts outside the managed domain have IP source addresses verifiable by routes in the enforcing entity's local routing table. If an exiting packet does...

Hi,I'm trying to ping an IP on the subnet I've created 10.1.101.1/24 from network 10.0.0.0/16. I've pasted in output from packet tracer below. Am I missing something? I don't have any ACL's applied to all interfaces. ASA# packet-tracer input inside i...

Hi ,I have ASA5520 and module ASA-SSM 10.When i use the asdm ,I can open GUI for ASA main menu and IPS.But ASA main menu is working fine,but when i click the IPS icon,its not connecting the ASA-SSM-Module.I'am geting some error.Unable to Access the I...

I upgraded IOS on PIX 515E from ASA image 7.2(4) to PIX image 8.0(4)16. NTP statement disappeared. I tried to add NTP statement back, but got the following error messages:Firewall(config)# ntp server 10.3.1.3 vPif_getVpif: bad vPifNum(0xffff) from ...

Hi,I have a PIX 515 E,it is working fine all the ways,but suddenly the entire LAN users ar enot able to access the INTERNET,but the same time mails are going and coming without any problem.VPN tunnels are established but throgh the tunnels applicati...

HiHere's a gif in attachment that will help you to figure out what I'm trying to say.I plan to secure 3-tier architecture with firewall that I already have. It's an ASA 5520 and I transformed my Management interface into an Ethernet Interface so as ...

Hi I need to ask a simple question, I have a site to site VPN, and it is working properly, If i want to add an access-list on the outside interface of the firewall for the incoming traffic, does it affect the VPN Traffic? i have to permit anything re...

Hello,I am looking for the best solution to monitor SIP traffic. We have around 20 Voice Gateways ( AS5400). We have experiences drop calls recently and the only way was to run a packet capture to identify the fault. I found this solution too complex...

IOS = C2600-ADVENTERPRISEK9-M), Version 12.4(23)I have a 2651XM router configured as a vpn client, it connects to another 2651XM router which is config'd as the vpn server. The vpn server end works fine.I want the client connection to be fully auto, ...

Hi All,I have a ASA5520 installed with the AnyConnect VPN Client setup. Noticed that the maximum mtu size is 1406 bytes inside the tunnel. Would like to know if this is normal behavior for ASA? Can we adjust the mtu size to let say 1472 or 1500 bytes...

VPN Remote clients are successfully authenticated through Steel-Belted Radius when connecting to Cisco5520.For some wierd reason those sessions are not visible in "Current sessions" of the SBR Administrator although Radius logs confirm that the sessi...

Dear Team,1.When the easy VPN client gets connected to Easy VPN server,the client can access internet as well as network behind VPN server(if split tunnelling is enabled).It means if anyone on internet has compromised the VPN client system then he ca...