Network Security

Hi all, for some reason my firewall keeps losing the crypto isakmp nat traversal setting, why would this be ?

Hi all, with the asa firewall, does it perform stateful inspection both ways, i mean inside to outside, and outside to inside.

I have am trying to setup a network for a video surveillance system. The network is setup in a hub spoke configuration with multicast sources and receivers at all of the spokes. I am using a DMVPN configuration to encrypt tunnels from the spokes to t...

Remote pix need to access my local server 192.168.0.9 I am not quite sure how to configure. Below is the e-mail received from the remote tech. Also my pix config is attached. I'm attempting to ping your NAT'd IP address and this is unreachable on our...

Our ASA5510's recently failed over, and now I have a handful of VPN clients that can connect, but not route anywhere in our network. I'm not sure the configs have been properly synced, but I do not know how to confirm.

We are trying to bring up a site to site VPN. But the problem is that it only comes up when i initiate a ping from my end.My firewall is ASA5540 Software Version is 7.2(3) while the other one is running Cisco ASA5520, software version is 7.2(4)9. Hel...

Is it possible to use a DNS address in a Access rule instead of an IP address?Essentially I have a requirement where I would like to allow access to maps.google.com only?I cannot see a way to do this?

Looking to add another T1 to an exsiting 2600Xm router. We use IPSEC tunnels over the internet to connect offices.Will using "ip load-sharing per-packet" interfere with the IPSEC Site-to-Site tunnel between my Pix 506e and other Pix's?Is there someth...

Hello, everybody.Today I was revising our strategy for IPS event filtering and one question came to me:In what practical cases "Deny Percentage" value less than 100% should be (or may be) used?Thanks in advance!

I have to upgrade from CSA 5.2 to 6.0and I installed version CSA 6.0.0.201Now i could see, there is a new versionCSA_6.0.0.205.This release contains numerous fixes which are detailed in the CSA_6.0.0.205_readme filebut I can't see this file, are ther...

I believe I set thing up correctly on the c880 and I get this "DISABLED" for websense. Anybody know how to enable it?ip inspect name TEST http urlfilterip urlfilter server vendor websense 10.x.x.xip urlfilter server vendor websense 10.x.x.xTESTSTORE#...

when i try to configure redundant sub interfaces, i receive the following error.ASA1(config)# interface Redundant 1.2^ERROR: % Invalid input detected at '^' marker.ASA1(config)#anyone have any suggestionsCisco Adaptive Security Appliance Software Ver...

Hello, we tried to configure our new 5510 to secure a datacenter configuration in a level-3 static routing+access control configuration.Basically : - external IP is A - internal network is N, a public network routed through the 5510 - internal IP is ...

Hello all. I have a 5540 that I am having what I deem as odd ACL hits. The ASA is currently setup to allow traffic on the outside interface to a protected server on the inside interface. I currently have a permit ip any any applied to the inside inte...