Network Security

Hi All, I have two ASA as active/standby failover. these two are connected to 3750 switch through trunk port that carry vlan 10,20 and 30. I want to deploy IPS in between with inline mode. I am little confuse how to connect IPS here. should it be con...

Hello, we are deploying Cisco 871 routers to our customers, we do a simple IPSEC point to point VPN connection. We want to ensure the VoIP traffic is granted over the data traffic.I did this config but I don't know if I'm doing it right, because I th...

Hi,I've a IDSM-2 module (installed on a Catalyst 6500).This module is PowerDown; when I issue the command "power enable module .." the module can't be on line. I see this message on logging: %C6KPWR-SP-4-DISABLED: power to module in slot .. set off (...

Hi All, Can I use inline pair in IPS as trunk? The IPS is connected to ASA in one end and connected to switch to another end. I'd like to use inline pair but I am not sure if it can pass all vlan traffic. thanks Alex

Hi Everyone, I followed some sample configs online and configured my c1841 router to acceppt VPN Client connection. Now I'm able to connect the VPN Client to the router and able to ping the router's LAN IP address, but I couldn't get to any other com...

We have an ASA5520 running 7.0(4). This firewall has several static translations and it is announcing these out the outside interface via OSPF. I recently tried to upgrade to 8.0(2) and the firewall stopped announcing these translations. Why did this...

Hi all,I am looking at implementing an ASA system for multiple branches (17) in a client site.I know that the ASA 5510 can have the AIP-SSM module installed, where the 5505 cannot. I want to be able to offer firewall, an IPSEC VPN back to the hub sit...

Not a strong security guy here so please bear with me.I want to give access to limit pools of clients via my ASA with high security (ie ssl vpn). These clients would hit their designated pool of systems.Each system cannot see each other as for instan...

Hi,I am creating descriptions for users where they have issues with AV defs out of date.Is there a specific number of characters or size for this field.I am working in CAM 4.1.3.1Thanks

Hello all,I have an ASA 5510 with software 8.0.3 and configured a Local CA. The CA is working and I can enroll users with an certificate when they're connecting to the outside interface of the ASA. I'd like to be able to enroll users on the inside ne...

I have an ASA 5505 (running 8.0.4 code) that has to have proxyarp turned off on the inside interface due to the issue described in MS KB 888816. I am able to establish my vpn connection but I cant talk to any of my servers. When i turn proxyarp back ...

I have a pair of 5510 with SSM-10 cards(CSC). Failover is working fine, but for some reason I cannot access the CSC web interface on the Secondary unit when it is in standby. Is this by design, or is there a problem? I need to apply some license upgr...

Hello,I want to map all incomming ssh connections to an inside host. Everybody who wants to make ssh to my public IP to be routed to my local private IP. I use router 1812.what can i use? nat or port-map?Thank u!

Hello all,I'm new to the cert world and i'm studying for my ccsp now..however i have a slight confusing regarding " application firewalls" and "deep inspection firewalls" .Can anyone kindly point out the difference to me if there exists one? Thx,YB

hi all, I'm using ASA5510 and Zyxel routers to do site-to-site vpn. Because all of Zyxel routers are using ADSL(dynamic IP address). I decided to use dynamic vpn on the ASA. The serious problem is that when the tunnels have been built and then some t...