Network Security

Hi, I've been working on a VPN L2L tunnel between ASA5510 and Netscreen SSG for a month now with no success. The Netscreen is the remote VPN device and I have no control whatsoever on it. I, however, was able to get their config. Hope someone here ca...

Hi all, Another DMZ question I'm afraid. I'm trying to achieve the following and any assistance would be great.I want my Inside to PAT'd to the Outside and DMZ, I also need my Inside to able to access the DMZ via external (212*.*.0) as well as the in...

We are currently using CSA to prevent writing to USB drives by using "@removable" and defining a file set for USB (directories matching @ removable).This has caused a problem when using App-V-formerly SoftGrid to virtualize Adobe Eeader. App-V uses a...

I am wondering if it is possible to have 3 virtual external interfaces for 3 ISPs and configure 3 static PAT statements for one server on an internal vlan. The 3 default gateways are the 3 routers connected to the ISPs. Is there a way to get the fwsm...

We are looking to move our video conferencing to an IP based solution. I would like to firewall this connection as well as perform some sort of QOS that ensure 2 - 3 Mbps are guaranteed for outbound and inbound video conferencing.The ASA 5505 would h...

Our remote users already use AnyConnect to access our corporate network when offsite. We're in the process of implementing split tunneling through group policy, where more trusted users can have non-work traffic go directly to the internet, but less ...

Problem Details: Hi,I've recently migrated from PIX to ASA5540 Version 8.0(3)6. On the new ASA we've setup L2L tunnels andRemote access and everything seems to be working fine. However, we have a radiologistgroup who are using VPN remote access via t...

I have a vpn setup between a Cisco ASA 5505 and a CP NGX R65. The CP firewall is the remote side. The primary problem is that when a phase 1 rekey occurs it will often fail. Sometimes after a few hours it will come up on its own. At other times I cle...

I'm having the most frustrating problem and was hoping for some assistance?I'm fairly new to the Cisco ASA. We recently had an ASA 5510 installed at our corporate office to replace our old VPN Concentrator & PIX 515e. At our remote sites, we've had a...

Hello,I try to do a VPN between ASA 5510 and a router 871.I have enable the debug on the router 871 and I have these errors.Router 871#*Mar 3 05:42:32.971: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 10.10.100.3, remote x...

I have a pair of 525 PIX's running 6.3.3 (old I know, downtime preventing upgarde/hardware swap out) that just decided to start throwing failover errors.I saw this in the logs at the time of the failure:Jan 23 18:26:34 elm-pix-2 Jan 23 2009 18:26:34:...

Hi, I have a pair of ASA5520's running 7.2(2). I recently had an issue with VPN tunnels on the secondary ASA when a failover happens and the secondary ASA becomes the active firewall. Tunnels were not coming up after the failover, but I didn't see di...

I have found error while logging to my IPS. See the attach error file.

Hi,if i have a pc at home infected by a virus/worm, and i am accessing my office network through cisco remote vpn terminating on an ASA5540, can i infect my office PCs ?

Our ASA 5500 K8 had been configured like this :1 - One outside Port2- 4 DMZ portAfter running a few days, all DMZ networks are unrecheable, without any error is asdm logs (set debug)Can you help to resolve this issue ?Regards,Emmanuel