Network Security

Need advice on setting up two things on an ASA-5510.1) Setting up QoS on a VPN connection. When I enable QoS on a VPN it breaks all other VPNs I have configured.2) Setting up a VPN with an iPhone VPN Client. Cisco's Docs are pretty straight forward ...

Is there any functional difference between:global (outside) 1 interfaceandglobal (outside) 1 24.23.22.1 netmask /29assuming by global block is 24.23.22.0 /29 and the outside interface is 24.23.22.1 /29?

Is it possible to disable the automatic command replication in a failover ASA configuration?

Hi people,Can I manage two Internet providers and implement load balancing in a ASA 5505?Thanks for your help.Martin

Is it possible (with pix 6.3) to change the rule base line number ordering from incremental integers to base 10 line numbering ? I mean that right now the rulebase lines are line 1, line 2 line 3 etc. Can I change these into Line 10, 20 , 30? The pur...

Hi,I'm facing kind of weird behaviour on a Cisco PIX 515E firewall that I don't understand. I hope someone can explain this:I have a server on the inside interface of the firewall. I have set an access list on the outside interface to define rules fo...

I inhereited this mess and our ASA 5510's are in route so plan to upgrade are already in place.In the meantime I have to some syslogging. our private network is 10.1.x.x our DMZ address is 10.254.x.x I have a permit ACL for ICMP and Syslogging, howev...

Does it necessary to have icmp permit...statements on FWSM 3.2(2) ver.I tried with out having and am able to ping the interface.

My customer is planning on migrating a portion of its installed ASAs to the lates 8.0 code. Also, they are currently managing this devices with CSM 3.1.The issue here is that in the Supported Software docummentation for 3.1, the ASA version 8.0 is no...

Is there a way to add more than one IP on an interface for an ASA 5510 running V8.0(3) software?

I have a new ASA 5510 that is behind our router/firewall. I am having some problems with configuration and not sure where I am hung up. I can't ping the internal Lan, 192.168.1. addresses. I have attached my configuration.

Hello,My base design is with 3 routers. RouterA will be internet access for RouterB and RouterC. There are will be T1 between RouterA and RouterB and a T1 between RouterA and RouterC. I would like to know if I can replace RouterA with an ASA 5500 ...

Hi all!I have a L2L VPN tunnel configured and working in an 837 router using this config:crypto isakmp peer address 10.10.10.10 set aggressive-mode password mypassword set aggressive-mode client-endpoint fqdn 20.20.hu.uiI need to configure this tunne...

i'm now plan to purchase NACso what i need is NAC3310-250-K9only or i need NACMGR-3-K9& if i need NACMGR-3-K9 it will be installed on the same server or i'll need a server to install it