Network Security

I have made changes to nat and IPSec ACL's but the new lines in the ACL's are being ignored!This results in packets that should be sent encrypted going out unencrypted even though the packets match the ACL.On a different interface new rules for nat a...

I have configured Active / Standby and it working perfectly. I also have configured Stateful failover in the Firewall using the same Interface of Failover Link Gig 0/0. That is I am using the same Interface for both Link Failover and Stateful Failove...

I have a scenario where NAC is to be deployed in a University for staff and students. so i have created two roles Staff and Student. There are 2 AD (Primary and secondary) each for staff and student. Question 1Is that possible to define 2 AD for SSO ...

hi,while migrating from a VPN Concentrator 3000 to ASA 5520 (IOS 8.0.4), we'd like to put all VPN-related configuration settings in an openldap server (2.3.27).We have trouble finding ways to put group settings, LanLists (as they were called on the C...

what if a single ip is both nat 0 and nat 1

Hello ALL, My PIX 515E overheated and caught on fire. I have transferred all my configs from the PIX to a ASA 5505 Except fixup protocol dns maximum-length 512fixup protocol ftp 21fixup protocol h323 h225 1720fixup protocol h323 ras 1718-1719fixup pr...

Hi. I have a problem with VLAN that is in a FWSM. This belongs to Vlan computer rooms that have private address 172.16.0.0 mask 255.255.248.0, the IP addres of the VLAN in the FWSM is 172.16.0.1 - 1 months since I am experiencing the PING between PC'...

Please i need to configure asa5520 as firewall with 2 2 DMZ+ 1 outside + 1 insideI need configuration exemple for the same case : help pleasethanks in advance

Hi, I have to setup new V-lans department wise in our office. In current scenario, we have unmanaged switch which is connected with ASA 5505 FW where V-LAN 100 (NOC) is created and IP address of Inside Interface NOC V-lan is 192.168.12.1 which is a g...

Hi,I have problem configuring site-to-site VPN tunnel on Cisco ISR Router 3825 (used at DC) & 2811 (used at Branches and Aggregation Points) routers.Branches connect to the Aggregation Point (in short I call it AP) and Aggregation Points connect to t...

Hi,what are the best design considerations for security using 6503 E switch including FWSM,IDSM etc.Detailed design and configuration including cisco 3825 router and switches are required.

What is the command for setting a PIX 501 to factory default settings, Version 6.2(2)? The following command does not work.pixfirewall(config)# configure factory-default 192.168.1.1 255.255.255.255Specified IP address (192.168.1.1) is not allowed; it...

Hi,Sorry if this is not the place for this question. I couldn't find anything that looked like the right place.I have a brand new asa5510, it shipped with asa 7.0(8) and had updates on the cd to 8.0(2). I am looking to update my ststem to the 804 as ...

i have two firewalls configured as an Active-Active, i created two contexts plus the admin context in each firewall.as in the failover, one unit is acting as a Primary unit, and the other unit is acting as Secondary. so the primary unit is responsibl...