Network Security

Objective: Provide site-2-site VPN, remote access VPN and protect servers farm.Which is a better design? I feel muchmore comfortable having the VPN concentrator being protected by the firewall; however, at the same time,both encrypted and decrypted...

I want to buy a AIP-ssm IPS for ASA 5510. Can I block msn ? Can I say this IP can use MSN but these are not ? is that possible ? I know that there is no user based configuration on IPS but is there a way to do that with IP ?

Hello Dear guysI have a cisco nac solution (OOB)i want to user role base vlan taggingbut when i want to integrate active-directory users to NAC ,, it push all of them in one role.I cant not connect to OU of Active to seprate users :(any idea please?

when we try to connect to the web interface we get this in the logs Dropping TCP packet from dmz:smswitch.internal/80 to outside:cox.home/50206, reason: MSS exceeded, MSS 1260, data 1430

I'm trying to install an ASA 5505 on my Bellsouth pppoe DSL service and finally got everything working with the exception of name resolution. I can now ping 4.2.2.2 from an internal client, but I cannot surf the web or ping any servers on the Intern...

I have a AIP-SSM logging in the CSM 3.1, only store the current day and lost before logs.This issue can happen because the license this expired?

Hey guys.I have an ASA with an outside/inside/DMZ scenario. (TMP-WAN is the DMZ)I've got the global statements working on both the inside and outside interfaces. PAT on the outside works fine. PAT is also on the inside interface as there are a number...

A practical dillemma led me here:A customer has several remote sites wich each have a pc that connects to a virtual IP in the HQ lan, which in term is natted to a real HQ server IP on the asa. Now the need has risen to nat a specific group of remote ...

Hi, I want allow that VPN crossing the PIX 535 firewall. What the configurations steps in the PIX to do this ?. The VPN will be estabish between a Cisco 1811 and 7200. TKS

Hey all, I'm a little new to the FWSMs and ran into a problem. We have multiple subnets set up on the FWSM, and the FWSM is defaulting correctly (it is not in a redundant config yet, still building the environment).So one of these subnets has a box ...

since do command "delete disk0:"and "copy tftp flash:xxx.bin",asa5520 restart is abnormality and console port doesnot output. please help me.

HiI have recently installed an ASA5510 as our Firewall which actually replaced the old PIX. Now I am stuck with Static NATing. On the old PIX I could have multiple Static statements translating different public IP addresses to one IP address in my DM...

Hai,We are using Pix 515E with 6.3(4) operating system. We are seeing lot of dictionary attacks on our servers which are having live IP's. Is it possible to stop dictionary attack using the PIX. Also is there a way to block the user name and password...