Network Security

I have a 4255 that I inherited in my new position and after failing to connect via conventional methods (SSH, telnet, IPS Event Viewer) I connected to the console. No response from the device. I cycled the power on the device and the only thing that ...

helloi'm trying to generate a csr on an ASA 5505 (ASDM 6.1(1) ASA v8.0(3)) for our new SSL VPN service. i followed the documentation at http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808b3cff.shtml and submitted the ...

Hi, please i want to ask you if you know why is happen this. Y connect an ASA5520 en the network and it starts wotking good, the clients can navigate to internet, and then, the clients stops navigate, they can't get out to the asa. It coud be same bu...

Hi all, for some reason my firewall keeps losing the crypto isakmp nat traversal setting, why would this be ?

Hi all, with the asa firewall, does it perform stateful inspection both ways, i mean inside to outside, and outside to inside.

I have am trying to setup a network for a video surveillance system. The network is setup in a hub spoke configuration with multicast sources and receivers at all of the spokes. I am using a DMVPN configuration to encrypt tunnels from the spokes to t...

Remote pix need to access my local server 192.168.0.9 I am not quite sure how to configure. Below is the e-mail received from the remote tech. Also my pix config is attached. I'm attempting to ping your NAT'd IP address and this is unreachable on our...

Our ASA5510's recently failed over, and now I have a handful of VPN clients that can connect, but not route anywhere in our network. I'm not sure the configs have been properly synced, but I do not know how to confirm.

We are trying to bring up a site to site VPN. But the problem is that it only comes up when i initiate a ping from my end.My firewall is ASA5540 Software Version is 7.2(3) while the other one is running Cisco ASA5520, software version is 7.2(4)9. Hel...

Is it possible to use a DNS address in a Access rule instead of an IP address?Essentially I have a requirement where I would like to allow access to maps.google.com only?I cannot see a way to do this?

Looking to add another T1 to an exsiting 2600Xm router. We use IPSEC tunnels over the internet to connect offices.Will using "ip load-sharing per-packet" interfere with the IPSEC Site-to-Site tunnel between my Pix 506e and other Pix's?Is there someth...

Hello, everybody.Today I was revising our strategy for IPS event filtering and one question came to me:In what practical cases "Deny Percentage" value less than 100% should be (or may be) used?Thanks in advance!