Network Security

Has anyone had issues where guest users would come into your company network to VPN out to their own company network but is not able because the return traffic back to that user comes back as ESP instead of IP?

Hi, one of inside user are not able to connect with servers through remote VPN. And when I use clear xlate command then it works but after some time same issue happens. After inspection the logs then I found the following error.regular translation cr...

At first i configure my asa 5520 8.0 to vpn with 3des encryption but now i want aes encryptionWhen i set new crypto isakmp policy & transform-set it's not working and i see in debug this:IKEv1]: Group = x.x.x.x, IP = x.x.x.x, QM FSM error (P2 struct ...

Hi I have a Cisco ASA 5540 that I have numerous lan-to-lan VPN's. According to one of our IT analysts, they primarily use the tunnel from midnight to 7am. Outside of that time frame they say the tunnel goes down. Should I increase the timeout on my s...

Dear sir,We have cisco asa5520 firewall and we have two different isp links now we want to maintain two different networks through this firewall(we want to use two separate gateways through this )Is it possible to do like this.

Hi,I have two Cisco ASA 5520 having VPN plus license, currently we are using only one and other one is kept as ideal.I want to configure Active/Standby failover by using this two. I have checked in ASA it showing I have license for Active /Active fai...

I have a single net static for 120 dmz servers with no max_conns or em_limit set.Can anyone confirm whether values I set on the net static will apply to each host, or to the combined traffic for all hosts? I plan to replace with separate statics for ...

Hi,We have a server in Inside interface it should be accessed for Lan-to-Lan Vpn users not DMZ we are using ASA 5505

Hi!Can anybody give me the config to allow clients coming from dmz 192.168.22.0 access my terminal server (192.168.2.2) through inside 192.168.2.3 interface of pix and dmz to my isp router (public IP)through the outside interface (public ip) of pix.I...

I have three questions regarding auth-proxyone: (using a 1721 running 12.4 IOS)using local auth-proxy(which i have verified works), is there any way to define which dynamic ACL is applied, rather then a simple permit any? I know how to do this using...

The issue the customer is seeing is that he did an SNMPWALK on the VPN that has been working for some time ok but after the snmpwalk command was done the VPN needed rebooting and upon boot up came up with the following error : ...Invalid checksum for...

hey people, help with this FWSM module,again! traffic is not passing trough firewall. i configure 'access-list 100 extended permit ip any any" and apply to the inside interface. and when i ping outside world i can see that packets hit inbound access-...