Network Security

Hello:When I try to remove an access-list with the "no" command it doesn't remove that entry! I am not sure what I am doing worng here...for example, if I enter:no access-list test permit IP any anyI still see this entry in the running config.any tho...

Hi,Our supplier has configured IPS on ASA device. With changing to session mode and then making some configuration. But we are unable to test that it has been configured properly or not. Is there any way to check wheather it has been configured prope...

Hi,Does anyone use Websense inline with their Cisco ASA for web filtering?I'm trying to get my VPN's and client VPN's and Internal users have their web pages filtered and blocked based on our company policy.Or failing that see if our ISP provide web ...

Is it possible for an ASA to proxy-arp for an IP, and forward requests for that IP to a different destination?Scenario: We removed our internal DNS server to a completely different facility. The network is to be completely dismantled. We just found o...

I have noticed that connections going from one dmz to another have two entries in the ASA log, one "inbound" and one "outbound". I did not remember seeing this when we had a Pix. Did I just miss it before or is this a new feature with the ASA.

We are having a MARS 110R installed and the MARS cannot login to the IDS 4250 running 6.0.4E1. Access has been added for the MARS device under allowed host. Does the MARS and IDS 4250 have in compatiblity issues? The MARS is in the same subnet as the...

we are an ISP and we are considering giving managed security services to our customers, the ASA provides up to 50 security context in order to give the customer a virtual firewall. 1- do you recommend this scenario , 2-what about VPN, the multiple co...

Hello,I have a 515 PIX running version 6.3(4) which has 3 interfaces. One for the local network (inside), one for internet access (outside) and one for vpn tunnels.The problem is that when i try to configure RRI i get:crypto map mymap 1 set reverse-r...

Hi,I am new to NAC. Would you please give me hints about bandwidth/traffic policy/QoS management when using out-of-band deployment of NAC? Is it possible NAC to configure the switch port with the appropriate bandwidth limiting template when it recogn...

Hi,we have two 5520 working in multiple context mode. We try to implement outgoing QoS on the outside interface but it seems that we can't. I suppose it is an unsupported feature with multiple context mode. But there is no mention of this in the conf...

I have a new Cisco 5520 connected to isp and local lan. I ran the vpn wizard and configured laptop with cisco client. I can succesfuly connect to the vpn, ping the servers, and other devices, telnet to other cisco equipment on the lan, but when I go ...

Hi,I have Pix with some vpn clients configured, it is working fine, but the crypto list permissions has total IP access, I need to implement permissions only to my Server with a specific port, but, if I do that, I lost the vpn clients access.Please, ...

ASA5200 firewall had been deployed and live. The configuration is done via ASDm and also CLI. Now CSM is deployed to the network, and discovery of the firewall is work and able to pull all the existing config fom firewall. Previously let say I had ac...