Network Security

I have a 4240 that is physically sitting in between my edge router and my ASA - One interface is connected to router and the other is connected to ASA. I have confiured Inline Interface pair. My question is to manage 4240, what option do I have? I...

I'm having trouble loading a digital certificate on an ASA 5520 running 8.0(4). The CA is a Fedora Dogtag Certificate System with a very simple PKI scheme running (O=CM TEST). All of this is running on an isolated test network in a lab setting.I'm ...

Dear TeamI need to enable frag guard in PIX Firewall however i am not understanding the concept of database size in it The following is mentioned in the Cisco pdf regarding the same however i have not understood the "block" concept Setting the databa...

Hi, I am trying to perform a downgrade of PIX515E from version 7.2(2) to 7.0(4). I have found some info from the link http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml#t6. The procedure shows downgrade of ...

Experts: We have ASA 5505 model using into all production sites and as you all know that ASA 5505 model doesn't have included IPS solution. Now is there any other way we use this services by software basis. Please Advice. Thanks

I working on a project to migrate from our active/standby PIX 525's running 6.3(5) to active/standby ASA 5510's running 7.x. My PIX uses six physical interfaces (one for failover) and I would need to use VLANs on my ASA in order to support all the ...

Hi guys, I own a pair of Cisco ASA 5510 running version 8.x of PIX-OS in an Active/Passive failover setup, configured as router on a stick with redundant interfaces. 

shield1(config)# sh int outside 
Interface Redundant1.100 "outside", is up, ...

HiWe have a new range of public ips and need to add them to a new internal interface (not the outside one). Therefore I need to find out how to pass these IPs through the outside interface on to the new internal interface net2 without NAT.I've tried ...

And some one said, "Considering that everyone on the internet has access to the VPN, and if an L2TP user id is compromised, is there any chance we could restrict the access? "I know this is silly question, but i am confused myself. Our partner's have...

We have an IDSM-2 installation on 6500 switch. There is an ATM switch resides inside the data center. The branch ATMs having encrypted tunnel up to the ATM switch via IDSM-2 ( in-line mode).1. How does the IDSM-2 will analyze this traffic ?2. Is ther...

Hello all My ISP provide me with 2 links for redundancy and load balancing purposes. The subnet is broken in two parts, let's say 10.0.0.0/25 and 10.0.0.128/25. From Internet side each subnet is announced using BGP to ISP routers GW1 and GW2. Each ...

I just configured a new ASA 5520 running 8.0(4) with a fairly simple setup. For several weeks the only usage for it was B2B http requests going from Gi0/1 to Gi0/2. Fairly low bandwidth, around 150Kb/s. Never a problem. Yesterday I created on Gi0/0...

Hi, We have installed ASA 5505 in production and now making a plan for installation a second firewall for failover purpose. Now one question I wud like to ask that the primary FW is connected with ISP router, now can I have the second link from ISP a...