Network Security

I have branch locations that have dynamic ip addresses that need to create a vpn connection to my PIX 515. I currently have the PIX setup with static crypto mymap statements that have the static ip address given by the ISP, but want dynamic to work a...

Is it possible to use a pair of ASA 5520's in Active/Standby mode with a seperate ISP for internet access and VPN access? We want to seperate Internet and VPN traffic.

I have a fwsm which is used the connect a number of VRFs. Basically the fwsm functions as a router.fwsm version 3.2(6) just upgraded from 3.2(1).Occasionally i get the following error in my log: "%FWSM-3-305006: regular translation failed" I have con...

Hi all,We are having a problem with exempt-NATting using an ASA 5520.The top rule in my NAT table was as follows: access-list MPLSv_nat0_outbound line 1 extended permit ip object-group Vanco-remote object-group VancoThat group is configured as follow...

We are having some issues with VPN between Hubli/Cochin and Vodafone b'lore, it's stopped working after a link issue and we had re-routed the traffic thru Mumbai. We are not able to revert back thru Blore because tunnel is not coming Jun 5 11:51:03.0...

Hi allI have the following set up (as per diagram) and wheni try to issue nslookup command for the webserver from the linux box in vlan 40 (212.xx.xx.xx/29) i get a response from the outside interface of Ralph rather than the dns server 3.45 in Vlan ...

Hi to all,Please, excuse my english I work with cisco pix 515E.I have a reverse proxy server to integrate to my network.I placed it in a public dmz, and have placed my webserver in private dmz.I used static command (public dmz -> private dmz)I used n...

Is CSM a good tool to use to gather syslog information from various firewalls. MARS or something like that isn't in the budget yet so i'm looking for an interim solution.Thanks,Darren

hi everyone,can I somehow put a cap on one of the ports of the device in question, in order to limit the avaible bandwith to 2Mbps on that particular port? thanks in advance, all help is greatly appreciated!Peter

Can Cisco IPS Manager Express (IME) and Cisco Security Manager 3.2 be installed on the same machine? When I tried it complained that IEV assists and that it was unable too.

On MARS alerts (from IPS 4260) are received on one of the IE vulnerabilities.Event- Microsoft Internet Explorer Dynamic HTML Element Processing Memory Corruption Vulnerability Source ip/port-a.b.c.d/0Destination ip/port-w.x.y.z/0Protocol-TCP[w.x.y.z ...

Hi AllI have an issue in updating Cisco IPS (Platform ASA -SSM 10) Signatures . We have a valid license for the same . The issue is that for the Cisco IPS version 5.0(2)S152.0 , i am unable to update it to latest signatures S252.Kindly help me in thi...

I try to configure ASA5505 base license. I created 3 interface vlans; inside, outside, dmz by following this sample:http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/examples.html#wp1034897But I cannot ping from inside to dmz.Err...

Hi, I want to ask about ASA 5510. I have 2 link to internet (int eth0 and int eth1). I want to make rule like PBR in router. For example, I want 192.168.1.0/24 (inside) for internet go to eth0 and 192.168.2.0/24 (inside) for internet go to eth1. Can ...