Network Security

Hi,I'm using nmap and Nessus to port scan the external facing IP range of my ASA. When I port scan the "outside" IP my syslog server fills up with deny errors which is great. However I have other external IP's which are NAT'd to webservers on my Ci...

Hi, We have two ISP links following:1) 1.1.1.0/24-----Outside2) 2.2.2.0/24-----Outside2Internal Network : 192.168.10.0/24-InsideUsing commands for natting and patting i.e nat (Inside) 1 192.168.10.0 255.255.255.0global (outside) 1 interfaceNow I want...

I have a Cisco ASA firewall on an Internet connection - coming through an xrio 400 ADSL bonder.The problem is that the Cisco firewall - which has a static IP address - disappears completely after a variable amount of time and the Internet connection ...

Hello,I've been having issues with NAC AD SSO. The AD SSO service is started on both my CAS's in the CAS pair, and I do see that the Clean Access Agent attempts to perform AD SSO. But it fails and defaults to prompting for a local username and pass...

We're upgrading our network. As a part of the process we're replacing our 1750 Routers with a ASA 5505 with the latest software version 8.0.4.As far as ACLs, NAT'ing and routing goes so the config is the same on the new box.The problem is with a remo...

I am wanting to learn how to configure PIX's... particularly via CLI. I haven't dealt with firewalls and I want to learn. Can anyone suggest a good book with configs/labs that I can learn Cisco Pix CLI with?

Hello!I have a clientless sslvpn working as far as basic connectivity is concerned.And when I run the RDP service, the connection is successful and RDP works as expected but the web browser is stuck in limbo. I've attached a screen cap.Is anyone havi...

We have two VPN 3005 Concentrators. We setup as Load Balancing. I understand that each VPN Concentrator has a limit of 100 concurrent licenses. Does this license include IPSEC and site-to-site? How does VPN Concentrator count site-to-site license?...

Hello,I managed an ASA 5510 for a client, and they have roughly 100 remote access VPN users. They want to be able to monitor who is logged onto the remote access VPN at any time, but I do not want to give them access to the firewall to do show vpn-s...

I inherited a remote access VPN problem that I'm not sure how to resolve.I have a PIX 506E with a LAN address of 192.168.1.1/24. It is the default gateway for that LAN. I've configured remote access VPN so that clients authenticate locally to the P...

I am looking for a way to disconnect active client VPN users from either an ASA or Pix(6.3(5) code) when they reach their restricted hours. I am using ACS 4.0 and Tacacs+ to restrict time, but it won't kick off after users. Any insight would be appre...

All,I want to disable icmp on an ASA. I have icmp permit statements, but I'm wondering if this will affect any of my tunnels that are currently established. Any ideas if this is safe to do? I can't see why it wouldn't be, but it could be one of those...

I need to make WEBRdp work in WebSSL session. Issue seems to be an ActiveX issue. Are there any "fixes" to this problem?