Network Security

Am upgrading a production pair (failover pair) of Pix 525 to 6.3(5125) in next few days. (Also am rationalising exisiting rulebase). Any caveats on doing this upgrade with a failover pair? Thanks

Would like to know the exact functionality of Security context in ASA.I need to create some 30-35 vlan on subinterface of the firewall.According to daga sheet ASA5510 with security plus licenses support only 25 Vlans.Is it the limit or something else...

please correct my if I'm wrong with these old 6.3 command statements to a ver8.0Version 6.3conduit deny tcp any eq 1434 any conduit deny udp any eq 1434 any Version 8.0access-list outside deny tcp any any eq 1434access-list outside deny udp any any e...

Hi all,I am trying to configure CSA When in learn mode I have checked "allow" and "don't ask me again" boxes.However everytime I start the application I am still prompted for user action. I notice that each time this process is started it gives me a ...

Can you have both ssl vpn enabled and IPSEC on the same interface. I can not get the IPSEC client to configure

Hi guys,I'm currently configuring NAC for my network. I have selected VGOOB deployment. I have 14 VLANs with IDs 21 through 34. My trusted servers are on VLAN 1. Do i need other 14 VLANs for authentication(i.e VLANs to map my access VLANs)? Each VLAN...

hi, why multiple contexts don't support VPN, and will it soon ?

Hi, Last time i configured a firewall was a Pix520 (yes, a 520) so I understand a lot has changed. My goal is to setup an offsite with a 5505 that will go out over it's local cable for basic internet access, but for corporate access they will go over...

Folks I have a customer that has a requirement to track the IP Address a VPN user is assigned upon connecting to their ASA.I have looked at the 'logging list' and while that works by sending syslog messages it sends ipsec and ike which is a huge amou...

GreetingsWhen I set up a SPAN session with a regular TP interface as a destination I am able to allow specific VLANs on the destination trunk port. This does not work for me when I try the same setup with the IDSM data port as the destination. Has an...

Dear All,I have implemented NAC on my campus.but there is a big problem,my users have to refresh their Ip addresses when the NAC changes their VLans.but they have not enough permission for releasing their Ip address and renew it,any idea?

Hi all,anyone knows how's limit of the configurable internal users on an asa?Is the nvram size the only limit or is there some other kind of limitation?Tnx, Max.

I have an ASA 5540 using version 8.0(2). I'm in the process of setting up and using SSL vpn connections to the device. I have a vendor that is using RDP via the SSL (using the Java RDP client/server plugin). The SSL connects fine and works fine. When...