Network Security

How do I get access to the latest IOS for the PIX?

HiSo I've recently been told by Cisco that I shouldn't be deploying the NAC framework and that they REALLY suggest the appliance instead. Can anyone provide me with some REAL reasons why I'd want to purchase more hardware from Cisco when I've alread...

I posted this under the SMB as well but wanted to post under the VPN header at the same time.Hello all, I am very new to VPN's and Firewalls so please forgive me for lack of terminology usage. I am part of a company that has 20 internal PC's and 25 e...

Hi all!I had ASA version 7.2.4 and WebVPN. WebVPN users authentication happen through AD. How can I configure SSO for Microsoft Outlook Web Access?In Cisco guides I see configuration through Siteminder, is it independent product or AD can provide htt...

Hi,I just replaced a PIX 515 with an ASA 5510 failover.The PIX had about 10 static nat translations, and pat on the interface as follows:global (outside) 1 interfacenat (inside) 0 access-list inside_outbound_nat0_aclnat (inside) 1 0.0.0.0 0.0.0.0stat...

Dear Experts,I am going to have an installation for ASA 5520 with AIP-SSM10.I will be doing site-to-site VPN, Remote Access VPN and also SSL VPN on ASA.I want suggestions related to the ASA version. After reading release notes for version 8 i am thin...

Hi all,I have an ASA 5540 and I would like to forward all HTTP traffic comming from LAN to my Proxy server on DMZ. This Proxy will filter the content and send the traffic back to ASA and ASA must forward to INTERNET (please check the attachment). Wha...

Hi All,I have a desktop on the lan that has checkpoint secure remote installed and authenticates against a third party firewall. This was working fine but suddenly it has stopped working. In the monitoring I can see the acl is allowing the connecti...

I currently have an ASA 5510 and would like to add content filtering with the CSC module.My question is this my organization requires certain groups to be more restrictive than others. I do not see in any of the docs how to create this environment.I ...

Hi all, is there any way to make a NAT with ASA that... catch the port 80 and redirect to a port 8080 in a internal server?I know that with iptables i can do it.. but... with ASA i dont know if its possible... could anyone help me?I have read some po...

Hi,I have two ASA5510 configured in Active/Standby stateful failover. I noticed that when I connect via VPN and ping a server on the corporate LAN and disconnects one of the Active ASA Inside or Outside Interface, the ping times out for about a secon...

Hi,Can the FWSM or ACE cause users to get disconnected periodically?We have a server farm that is behind 2 x Cisco 6509-E which have the FWSM and ACE modules.The Dev team complains that once in a while they experience a network freeze while working a...

Hi, The PIX is used as Easy VPN server and L2L gateway in the same time. I have difficulties with a new L2L VPN (isakmp authentication rsa-sig) because the PIX sends Xauth and Modecfg requests and the peer (Linux box with OpenSwan) tries to interpret...

I was trying to authenticate remote access and webvpn users on ASA 7.2 wiht radius.vpn clients are fine but webvpn is not working with radius.Regards,