Network Security

My CA has emailed me a root certificate that i need to install on my pix before i can request for a ca certificate. I added all the necessary details using the ca command but cannot make a ca request because the pix doesn't have a root certificate. H...

I am in the process of setting up our PIX to auto-update clients. I have the webserver configured. Can anyone provide with the syntax to add this to the config?

Hello there,I have configured CAS and CAM. I want my users to authenticate using AD SSO. I have followed all procedures outlined in the CAM configuration guide(allow access to AD on Unauthenticated role, create the cas user, run the ktpass command e...

If we have two ISP's and want to achieve redunduncy for IPsec VPN using Cisco PIX Firewall? Is this possible? If yes how?

Hi,I have ASA 5505 running IOS 7.2(3) and ASDM 5.2(3). I configured remote access VPN with IP Pool 192.168.1.0/24. I can connect via VPN to the ASA but I can not access any resource on the LAN (192.168.0.0/24). I couldn't even PING the server on the ...

Hi,We have a number of customers who have PIX 501/506E with VPN clients ranging from two to about ten for each customer. Clients have VPN Client version 4.8.0.1.0300 or version 5.0.02.0090 running on Windows XP or Windows Vista.Recently some of these...

Hi,I am having trouble configuring remote access vpn using ASDM [ASDM Version 5.2(2)] on ASA 5505 [ASA Version 7.2(2)]. I get the following error message. Please help!!!ASDM received message(s) below when one or more of the commands below were sent t...

Hi, I don't know why it's started doing this, but when I view my Cisco ASA config via telent and do a "sh Run" then it scrolls through all the config until it gets to the bottom!I want it to do the usual and allow me to hit the space bar or return ke...

Dear all,I can not access telnet or http from outside...... I m trying to accesstelnet or http using IP 10.5.213.22 Working Running Config is life this ..... sh run : Saved : ASA Version 7.2(2) ! hostname ABB-ASA5505 domain-name cisco.com enable pass...

Hi All,I am planning to put up a proxy server on our internal network and would like to see if this is the best way to configure my ASA (7.2(2)):(1) Proxy located on internal network(2) All client browser will be set (Internet Explorer) to use the pr...

Hi all, what is the normal way of denying traffic to a dmz, if from the inside all is allowed, would i just create an access list on the dmz outbound ?

Hi, on my ASA I have added the following for SSH2, but what do I need to do next?ip domain name domain.comIP SSH version 2crypto key generate rsaWhen I log it says it needs a username and password. I have a level 15 username and password that I use ...

I am going to be doing a very significant number of config changes to a production Pix 525. This includes removing entire access lists, some objects, shutting down some unused interfaces, adding some new object groups, removing some access list entri...

I have a site to site connection setup between an ASA 5510 and a PIX 501. I have the ASA's inside 10.1.1.x network being able to access the PIX's 10.2.2.x network. That is working fine. However, I need to be able to access both the ASA and PIX's outs...

Does the ASA 5510 allow you to static NAT and external address to more than one internal address?For example, if host A is not available, the NAT from outside in will go to host B?