Network Security

Looking for help in determining what I need for a NAC solution. If I want to get a NAC 3350 security appliance, what else do I need. I seems to me that I need a Clean Access Manager, Clean access server license, Clean access manager license, and lic...

Has anyone had any issues with Anyconnect registering the client in the internal DNS? If so, how do you turn it off? I just want clients to have network access, but not registered in DNS.

Hi Sir,I have an FWSM version 3.1(8) installed in a Catalyst 6513 (with Sup720). It is configured in multiple context mode.All the contexts (admin + user) initially have AAA Authentication configured to authenticate CLI access against a TACACS+ serve...

I am probably not looking hard enough but can anyone point me in the right direction on the following:We are running ASA version 7 and need to create an access list that allows web traffic out but only if it ends in the url *.mycompany.com The url do...

Hi,The FWSM does not include any external physical interfaceswhat are the risks ?

Greetings, ive had an ASA 5510 with 8.0(3) software running for the past week on test, ive configured the unit using the configuration below. Port E0/1 is connected to a 2960G Switch Trunk Port set to admit all Vlans, the switch has each vlan configu...

Devices behind firewall all on one network but dept stated they want their server to be "isolated" while still on same network.Is my only option to create another context and place server in it? For just a single server this seems like overkill, not...

Please see attached visio diagramI have a 50 site MPLS cloud running BGPAt one of my remote sites, I have a 2821 router and PIX running ospfWhen the MPLS/BGP drops, the remote router brings up a VPN connection to the host.The host router gets routing...

Some routers sold out there, eg my LinkSys WRT54GC, has the "IPsec passthrough" integrated in it. This is very useful in the case when the remote firewall doesn't have the NAT traversal enabled (and it's difficult to ask that admin to enable it).I'm...

We have just had two internet lines installed and active 20mb and a backup 2mb. The two lines are in different sites connected by a LES 1000 for Disaster recovery - both sites are in the same town.I need to configure some ASA firewalls to support the...

hai can anybody tell me how to block G-talk for certain users and the rest can allowed.please give me a sample command for this

Is it possible to create a neighbor relationship between an ASA and a router on the external interface? I would like to have the ASA receive the default route from our external DS3 router so that I can reroute to our secondary provider should an out...