Network Security

Is it possible for an ASA to proxy-arp for an IP, and forward requests for that IP to a different destination?Scenario: We removed our internal DNS server to a completely different facility. The network is to be completely dismantled. We just found...

I have noticed that connections going from one dmz to another have two entries in the ASA log, one "inbound" and one "outbound". I did not remember seeing this when we had a Pix. Did I just miss it before or is this a new feature with the ASA.

We are having a MARS 110R installed and the MARS cannot login to the IDS 4250 running 6.0.4E1. Access has been added for the MARS device under allowed host. Does the MARS and IDS 4250 have in compatiblity issues? The MARS is in the same subnet as the...

we are an ISP and we are considering giving managed security services to our customers, the ASA provides up to 50 security context in order to give the customer a virtual firewall. 1- do you recommend this scenario , 2-what about VPN, the multiple co...

Hello,I have a 515 PIX running version 6.3(4) which has 3 interfaces. One for the local network (inside), one for internet access (outside) and one for vpn tunnels.The problem is that when i try to configure RRI i get:crypto map mymap 1 set reverse-r...

Hi,I am new to NAC. Would you please give me hints about bandwidth/traffic policy/QoS management when using out-of-band deployment of NAC? Is it possible NAC to configure the switch port with the appropriate bandwidth limiting template when it recog...

Hi,we have two 5520 working in multiple context mode. We try to implement outgoing QoS on the outside interface but it seems that we can't. I suppose it is an unsupported feature with multiple context mode. But there is no mention of this in the conf...

I have a new Cisco 5520 connected to isp and local lan. I ran the vpn wizard and configured laptop with cisco client. I can succesfuly connect to the vpn, ping the servers, and other devices, telnet to other cisco equipment on the lan, but when I go ...

Hi,I have Pix with some vpn clients configured, it is working fine, but the crypto list permissions has total IP access, I need to implement permissions only to my Server with a specific port, but, if I do that, I lost the vpn clients access.Please,...

ASA5200 firewall had been deployed and live. The configuration is done via ASDm and also CLI. Now CSM is deployed to the network, and discovery of the firewall is work and able to pull all the existing config fom firewall. Previously let say I had ac...

Hi, Can configure 2 ASA with 2 CSC in A/A for support 2000 users?I know that there's a limit of 1000 user for plattform.Thanks

I have a streaming server setup with a private IP behind an ASA 5540. I've given the server a static public NAT address. Using ACL I've allowed in port 554. When trying to remotely stream from the remote client to the NAT'd server, the server gets...

Is there any way (aditional software maybe) to get the BIOS version from the pix without restarting it? I need the BIOS version but cannot restart the PIX because of the environment being HC. Thanks for any help.KC

Hi,I have PIX 515E with failover license box. can I use the same as active firewall in diffrent network.Thanks

Hi,when i am trying to add new device, am getting the bellow error....kindly provide me informationIOExpection when try tog get certificate; untrusted server cert chain Check if the sensor time and IEV host time are set correctly