Network Security

Dear All,When i am trying to access one server which is above my ASA i am getting the following error.=======================Dropping TCP packet from Outside:10.20.8.52/30000 to Inside:10.20.0.243/34538, reason: MSS exceeded, MSS 1380, data 1436=====...

Hi All, I have two ASA as active/standby failover. these two are connected to 3750 switch through trunk port that carry vlan 10,20 and 30. I want to deploy IPS in between with inline mode. I am little confuse how to connect IPS here. should it be con...

Hello, we are deploying Cisco 871 routers to our customers, we do a simple IPSEC point to point VPN connection. We want to ensure the VoIP traffic is granted over the data traffic.I did this config but I don't know if I'm doing it right, because I th...

Hi,I've a IDSM-2 module (installed on a Catalyst 6500).This module is PowerDown; when I issue the command "power enable module .." the module can't be on line. I see this message on logging: %C6KPWR-SP-4-DISABLED: power to module in slot .. set off (...

Hi All, Can I use inline pair in IPS as trunk? The IPS is connected to ASA in one end and connected to switch to another end. I'd like to use inline pair but I am not sure if it can pass all vlan traffic. thanks Alex

Hi Everyone, I followed some sample configs online and configured my c1841 router to acceppt VPN Client connection. Now I'm able to connect the VPN Client to the router and able to ping the router's LAN IP address, but I couldn't get to any other com...

We have an ASA5520 running 7.0(4). This firewall has several static translations and it is announcing these out the outside interface via OSPF. I recently tried to upgrade to 8.0(2) and the firewall stopped announcing these translations. Why did this...

Hi all,I am looking at implementing an ASA system for multiple branches (17) in a client site.I know that the ASA 5510 can have the AIP-SSM module installed, where the 5505 cannot. I want to be able to offer firewall, an IPSEC VPN back to the hub sit...

Not a strong security guy here so please bear with me.I want to give access to limit pools of clients via my ASA with high security (ie ssl vpn). These clients would hit their designated pool of systems.Each system cannot see each other as for instan...

Hi,I am creating descriptions for users where they have issues with AV defs out of date.Is there a specific number of characters or size for this field.I am working in CAM 4.1.3.1Thanks

Hello all,I have an ASA 5510 with software 8.0.3 and configured a Local CA. The CA is working and I can enroll users with an certificate when they're connecting to the outside interface of the ASA. I'd like to be able to enroll users on the inside ne...

I have an ASA 5505 (running 8.0.4 code) that has to have proxyarp turned off on the inside interface due to the issue described in MS KB 888816. I am able to establish my vpn connection but I cant talk to any of my servers. When i turn proxyarp back ...

I have a pair of 5510 with SSM-10 cards(CSC). Failover is working fine, but for some reason I cannot access the CSC web interface on the Secondary unit when it is in standby. Is this by design, or is there a problem? I need to apply some license upgr...

Hello,I want to map all incomming ssh connections to an inside host. Everybody who wants to make ssh to my public IP to be routed to my local private IP. I use router 1812.what can i use? nat or port-map?Thank u!