Network Security

Hi all,I need advice to creat a outside ACL for watchguard VPN trafic on our ASA.Below are a old ACL but no VPN watchguard trafic.Any sugestion?access-list acl_outside extended permit udp host -ip numbers removed- host -ip numbers removed- eq isakmp ...

Hello,Have an ASA 5505 7.2(3) behind a transparently-bridged aDSL modem, with ASA configured with PPPoE on outside interface. The PPPoE connection does not establish, with ISP stating it is an LCP issue.Quote from ISP: "I have seen this in other Ci...

Hello,I have seen that starting with sw version 8.0 it is possible to configure NAT with a firewall in transparent mode.I have an scenario where the upstream router (internet gateway) is performing NAT. Due to this reason sometimes the router proces...

I have a colo facility and a main office, both with 5510's. I have a leased line between the two 5510's. I have enabled the interfaces and can ping between the leased line interfaces - but I cannot ping between other local interfaces (Eth 0/3 and Eth...

Dear AllWe are having following scenario at one of the customers ISP Link -> L2 Switch -> IPS in Inline (VLAN)Mode -> PIX Firewall There are lot of Site to Site VPN tunnels terminated on the PIX Firewall; hence please let me know if the VPN traffic t...

Hi all,In our head office we have a pix506e and we have numerous remote offices with 877s. Each remote office has a site-site VPN connection to the PIX.The problem I'm having we recently added 8 new sites, only half of which work. They will all form...

Hey All, I have an old 1751-V router that I would like to run zone based firewalls on using an advancedipserves image. From my searching in the Cisco tools I cannot seem to find an advancedipservices feature set that supports zone based firewalls.I ...

Where do I enable group lookup on this platform?ASDM location or cli command are good for me.

I am working today at a Client Site where I installed several months ago a Cisco IPS 4240 Sensor. The Sensor is currently running Version 6.0(3)E1.I am not certain how to proceed with respect to signature updates on this box.Under signature definiti...

hi, I currently have a PIX 506 in a test environment and am trying to come up with a solution for the following. I am trying to use NAT in a rather unorthodox way.two networks, 10.5.1.0/24 on the inside and 172.26.224.0 on the outside. The PIX 506 ...

I want to use my Windows Mobile phone to connect to an ipsec tunnel on an ASA. What client would I use to do so? The Tunnel uses VPN Groups

Hii need to know if the ASA 5510 support Active/Active feature or not ????please advice regards

hi all can someone just advise which is a better solution the nac appliance or the nac framework. regardssushil

HiI created site-to-site vpn between asa and pix with no sysopt connecion permit-vpn.I used interface access-list to control what remote site(PIX) can access to main site(ASA).IPSec connection is up and everything is working fine.I have question rela...