Network Security

HelloI have a customer who has a guest-VLAN on his ASA-5520. He wants to log all traffic entering and leaving this interface, but not the other interfaces - how can this be accomplished.any help is greatly appreciated

Anybody have any idea what this FWSM error message means? According to "sh resource acl", I'm only using about 20% of the available ACEs.Cebalrai/BANNER# config tCebalrai/BANNER(config)# access-list sctprod-ingress line 20 extended permit tcp host ab...

I am trying to establish a vpn tunnel from windows 2003 server which is behind a PIX 501 without any success. I am able to establish a vpn session if the server is not behind a Pix 501.Any Iseas why?Thanks for any help.

We had trouble after a brief ISP outage with one of our VPN tunnels not coming back up. All other tunnels came up and configuration was not changed on either end. We spent several hours last night troubleshooting with the connecting company and with ...

I am deploying nac in-band L3 VG, the untrusted site is conected to a L3 switch with 3 diferent subnets, from that switch there are 3 diferent wireless networks, the trusted site is conected to a L2 switch and from there to two ASAs in fail-over.Prob...

Hi Friends,I want to place the IPS in inline mode between my 6513 core switch and wan router but IPS has only one sesnsing interface.so how to place it in inline mode?I have four vlans 110,111,112,113 configured on my 6513 core switchplease help on t...

We have an ASA 5505 running 8.0. Users connected to the internet through this device report very slow response time. show local-host is showing one particular host with 75+ TCP connections and 50+ UDP connections. We suspect a problem with this machi...

Hello,Im trying to reset the password to a 506E Pix firewall using the TFTP method. I have followed the directions located on Cisco's website however I cannot get a workable network connection between my pc and the firewall.I set up the interfaces on...

Hi there..am trying to configure the nat (inside) 1 interface command but it gives me an error..thanks

Hi there..There are 2 interfaces configured on ASA, where one is connected to 10.x.x.x and the other connected to 192.x.x.x ..the problem is there seems to be no communication between these two..any suggestions.FYI: they hav the same security level a...

Hi you all.How can I see (know) the license installed on a PIX 525?or how do I backup a license?thanks

Hi,Internet slow response------------------------Scenario:-FWSM-----DMZ------Websense is connected and outside segment.Inside users ar accessing the internet first it will go to the websence and filter, it will redirect to Outside segment.Conf:sh url...

Hi,yesterday, after succesfull upgrade FWSM from c6svc-fwm-k9.2-3-4.bin to c6svc-fwm-k9.3-1-3.bin the module did not start. #show module 1Mod Ports Card Type Model Serial No.--- ----- -------------------------------------- ------------------ --------...

Hi All,I need to block certain web pages with my ASA but I don't have a Websense or N2H2 server. I've heard that you can do this with the ASA itself using Regex. My question is, is this really a good/easy way to do it? Does it really works fine?Thank...