Network Security

we are an ISP and we are considering giving managed security services to our customers, the ASA provides up to 50 security context in order to give the customer a virtual firewall. 1- do you recommend this scenario , 2-what about VPN, the multiple co...

Hello,I have a 515 PIX running version 6.3(4) which has 3 interfaces. One for the local network (inside), one for internet access (outside) and one for vpn tunnels.The problem is that when i try to configure RRI i get:crypto map mymap 1 set reverse-r...

Hi,I am new to NAC. Would you please give me hints about bandwidth/traffic policy/QoS management when using out-of-band deployment of NAC? Is it possible NAC to configure the switch port with the appropriate bandwidth limiting template when it recog...

Hi,we have two 5520 working in multiple context mode. We try to implement outgoing QoS on the outside interface but it seems that we can't. I suppose it is an unsupported feature with multiple context mode. But there is no mention of this in the conf...

I have a new Cisco 5520 connected to isp and local lan. I ran the vpn wizard and configured laptop with cisco client. I can succesfuly connect to the vpn, ping the servers, and other devices, telnet to other cisco equipment on the lan, but when I go ...

Hi,I have Pix with some vpn clients configured, it is working fine, but the crypto list permissions has total IP access, I need to implement permissions only to my Server with a specific port, but, if I do that, I lost the vpn clients access.Please,...

ASA5200 firewall had been deployed and live. The configuration is done via ASDm and also CLI. Now CSM is deployed to the network, and discovery of the firewall is work and able to pull all the existing config fom firewall. Previously let say I had ac...

Hi, Can configure 2 ASA with 2 CSC in A/A for support 2000 users?I know that there's a limit of 1000 user for plattform.Thanks

I have a streaming server setup with a private IP behind an ASA 5540. I've given the server a static public NAT address. Using ACL I've allowed in port 554. When trying to remotely stream from the remote client to the NAT'd server, the server gets...

Is there any way (aditional software maybe) to get the BIOS version from the pix without restarting it? I need the BIOS version but cannot restart the PIX because of the environment being HC. Thanks for any help.KC

Hi,I have PIX 515E with failover license box. can I use the same as active firewall in diffrent network.Thanks

Hi,when i am trying to add new device, am getting the bellow error....kindly provide me informationIOExpection when try tog get certificate; untrusted server cert chain Check if the sensor time and IEV host time are set correctly

Hi,i have an asa 5505 setup as a default router for my network inside address 192.168.32.254. I want to route traffic for 192.168.251.0 to a diffrent inside host 192.168.32.205I included traffice from 192.168.32.0 to 192.168.251.0 in my nat exempt li...

Hi All,Is there such a thing as redirecting certain ports (for example, port 80) from ASA to a certain IP address that is a proxy server? What I am trying to do is to implement a transparent proxy server in our internal network. The flow is in a such...