Network Security

Is it possible using a ASA5505 to sort of...augment the DNS resolution?We are using DHCP to configure inside hosts and they are being given the ISP's DNS server info but we have one internal server we would like them to be able to resolve as well.So ...

Hi,I enable the fw and it can block all IM (yahoo and MSN). However, I would like to enable some customers (192.168.25.12 and 192.168.25.13) can use MSN and yahoo IM. How do I config the csico 1811?### config::appfw policy-name test application im ao...

my client had a ips with 6.0x image, they having license upto DEC-2009, 2 days back IPS crashed, so loaded new image which is 6.1x after that i updated license information through cisco.com then it came only upto May-17-2009 it should be upto DEC-200...

Hi,I am trying to configure Active/Standby LAN-based stateful failover on two ASA 5510 running OS version 7.2(3)and having Security Plus license.I assigned IP addresses to the interfaces as shown in the attachement and I could ping all interfaces. Th...

I need to audit inbound connections to our ASA. It seems the only way is to set the Syslog settings on the ASA to informational, is this okfor the ASA? or very resourceful?Worst thing is we only need to be notified when a server webserver gets access...

Is anyone familiar with the differences between the Cisco router IOS WebVPN capabilities vs. the WebVPN available on the ASA? Are they essentially the same?

Hi,I am setting a Site-to-Site tunnel between my router and VPN3K concentrator. I have configured both the router and the VPN3K to get certificates from a local MS CA. When I run the interesting traffic between the 2 boxes, I am getting error below: ...

Hi, is there a way to recover a message that has been previously detected as SPAM by the CSC-SSM Module, sometimes we get legimit email targeted as SPAM, I want to know if there's a way the CSC-SSM to save the email to get it back or recover it in ca...

Hi,Has anybody tried this? I understand that in mars, only mcafee epo v3.5 is supported. We're evaluating both products. During testing, we seem to be doing the correct configurations but we can't make it work. I'm just wondering if anybody was able ...

I have Mars v4.2.6 and I wish to add checkpoint. I've gone through all the instruction as per the user guide and yet I still can't get this to work. When I click discover (under MARS) I get the following message: "CPMISessionNew failed messg: NO Erro...

We have two ASA 5510 devices. Both configured exactly the same. One is working, the other isn't. We plug ASA (2) in to the network and unplug ASA (1) and we can ping internally, and to our DMZ, but we can't browse to the web. We go back to ASA (1) an...

We are currently looking into the features of a NAC appliance. From the reading I have done thus far, it seems like an edge architecture is the best architecture to go with. That being said, my question is this:How many NAC appliances would I need to...

Hello, I'm looking for suggestions on how best to implement dynamic routing (ospf) in the following scenario:1. Two 'hub' sites (I'll call them A & B)2. Site A has an ASA 5520, B has a PIX5153. Approx 60 spoke sites mainly using 857s with IPSec back ...

Dear all,I am trying to implement Dynamic VPN on a Cisco 7609 (IOS 12.2<18>SXF13) & when I connect to this router through a Cisco VPN Client, an IPSEC tunnel is established.When I issue "sh crypto ipsec sa" encrypted & decrypted packets are not equal...

Is it possible to allow eigrp adjacencies through an ASA5520 in transparent mode (also running multiple context). I'm running software version 7.0(7)