Network Security

Hi,I have an ASA5510. When I put the command 'crypto map MAP 20 set peer a.b.c.d', an error message "[IKEv1]: Ignoring msg to mark SA with specified coordinates <MAP, 20> dead" comes out. What does this mean?When I turned out debug crypto isakmp 127,...

Hi all Please let me know if we can configure TACACS for IDS .If yes , please let me know how to go about the same RegardsAnkur

So I have a L2L vpn tunnel up between a PIX 506E and a PIX 515EWhen i try to load https://pix-506E from user connected to PIX-515E i can't access to it.I believe i need to apply an ACL to PIX-506E to allow PIX-515E on port 8080.Can you pleae help me ...

OK, I am stumped. I created the VPN connection, have it auto xauth, VPN comes up, but I cant route. What do I need to do the get routing established? The networks I need to reach are 10.14.0.0/24, .1.0, .2.0, and .3.0 /24 which are behind the ASA, th...

Hello!I have some problems with CSA and Apache on RedHat Linux Enterprise ES 4. During the logrotate process CSA denies all connections to Apache and gives the alert such asMay 19 15:15:06 msks0080 CiscoSecurityAgent[3297]: Event: The process '<Unkno...

Hi, We have multiple ASA's (7.2) and installed on different locations and we have established VPN connection among all of them. Now we want to upgrade 8.3 version one by one on all location. After upgrading it is required new configuration or all con...

Im trying to do a password recovery on a PIX,i downloaded the password recovery software np63 and renamed it to np63.bini keep following these steps..monitor>interface 00: i8255X @ PCI(bus:0 dev:13 irq:10)1: i8255X @ PCI(bus:0 dev:14 irq:7 ) Using 0:...

Hi ,Iam facing problem in configuring IPS SSM in ASA 55201)Its not taking the ip on virtual sensing interface. 2)iam not able to ping the management ip address although the gateway is pingable.this is the show config of SSM Module.! -----------------...

Hi,While configuring the cable based failover, i selected one of the data interface to be also failover linkcommand i used was failover link interface2. The ip address is already assigned to interface 2. This was on the primary unit only. on the seco...

Looking for help in determining what I need for a NAC solution. If I want to get a NAC 3350 security appliance, what else do I need. I seems to me that I need a Clean Access Manager, Clean access server license, Clean access manager license, and lice...

Has anyone had any issues with Anyconnect registering the client in the internal DNS? If so, how do you turn it off? I just want clients to have network access, but not registered in DNS.

Hi Sir,I have an FWSM version 3.1(8) installed in a Catalyst 6513 (with Sup720). It is configured in multiple context mode.All the contexts (admin + user) initially have AAA Authentication configured to authenticate CLI access against a TACACS+ serve...

I am probably not looking hard enough but can anyone point me in the right direction on the following:We are running ASA version 7 and need to create an access list that allows web traffic out but only if it ends in the url *.mycompany.com The url do...