Network Security

I have a webserver that that has a portmapping from the outside x.x.x.x port 80 to a dmz address y.y.y.y port 82. Works fine. I want to have the outside x.x.x.x port 80 mapped also to a dmz address v.v.v.v port 83 when x.x.x.x is taken down to displa...

Hi, all,I have a simple yet weird problem I could not explain. Corp VPN gateway is ASA5520 running 7.2 code, branch VPN gateway is ASA 5505 running 8.0 code, I created a simple L2L IPsec between the two to protect communications between HQ subnet (10...

Hope you can helpI have a ASA 5520 and was testing vpn configuration using the packet tracer in asdm. Due to a typo I simiuated a land attack (ie same source and destination address). The ASA then blocked connections to some ip addresses (other servi...

Hi,I have transparent multiple context setup on FWSM. all are fine. What I'm trying to do is, I want context A be able to talk to context B and vice versa but not to context C. Any idea?ContextAContextBContextC

Hi,I migrated remote users from the MS PPTP to Cisco VPN Client 3 months ago. Since then, Remote users are getting "dead air" calls when they dial each other's extension. When remote users dial someone's extension at the company's 12 locations, every...

Good night guys,I configurated two ASA and the vpn didnt work, what is wrong?Here is the vpn configuration and the resultscrypto isakmp policy 10 hash md5crypto isakmp policy 10 authentication pre-sharecrypto isakmp enable outsidecrypto map mymap 10 ...

I have ha profiler running with ha cas (v4.5)and ha cam. I am seeing only 2 profiles when I look at the profiles. I only see APC UPS and Unknown. Does anyone have any ideas on why I am not seeing any other profiles? I am using an IP Phone to test wit...

Hi ALL,I have a quick & silly question.My switch has the IOS (tm) s72033_rp Software (s72033_rp-IPSERVICES_WAN-M), Version 12.2(18)SXF11, RELEASE SOFTWARE (fc1)and ROM: System Bootstrap, Version 12.2(14r)S9, RELEASE SOFTWARE (fc1)Will this be compati...

hi,is there a default value for tcp connection time out on ASA? I have turned off tcp timeout on my ASA, but I still have stiration the idle connection between client and server (2h idle) are droped (oracle server send ACK with RST flag)

Hi,Any suggestion about how to correctly monitor HTTP Traffic from a certain host ?I just received a request to log, for a specific period of time, http traffic from a host on the inside network to internet and to generate a sort of human readable ou...

I was wondering if I can do an active/active setup and still use Remote Access IPSEC VPN's with two ASA 5550's. I hear that you can't but if that is true are there any workarounds? I don't care if the VPN tunnels don't failover, I just want it so tha...

Ok, here's my situation, mind you i'm extremely new to Cisco router/firewalls. I have a internal device that generates a vpn tunnel to a remote location. However I have a ASA 5510 as my firewall. How do I configure the ASA 5510 to allow the VPN traff...

I'm using IOS (c3845-advipservicesk9-mz.124-15.T3) zone-based firewall on a 3845 router and when I enable logging on an extended access list (permit ip any any log) that I have applied to a class-map, I get the following message:"class-map my_cl_map ...

I am trying to clean up some items on my network, and I noticed this under my realtime log viewer. A IP address 10.10.10.158 (old Citrix Web interface server) has been turned off for 3 months, and I'm seeing this packet transfered every 3-5 seconds I...

Greetings, Guys, I'm using CCA v4.5 and I'm having a hard time updating it's Rules/Lists/Policies for Clean Access. I've arranged that the CAM has connectivity to WAN-Internet so it can download the updates but after running the process this is what ...