Network Security

GreetingsWhen I set up a SPAN session with a regular TP interface as a destination I am able to allow specific VLANs on the destination trunk port. This does not work for me when I try the same setup with the IDSM data port as the destination. Has an...

Dear All,I have implemented NAC on my campus.but there is a big problem,my users have to refresh their Ip addresses when the NAC changes their VLans.but they have not enough permission for releasing their Ip address and renew it,any idea?

Hi all,anyone knows how's limit of the configurable internal users on an asa?Is the nvram size the only limit or is there some other kind of limitation?Tnx, Max.

I have an ASA 5540 using version 8.0(2). I'm in the process of setting up and using SSL vpn connections to the device. I have a vendor that is using RDP via the SSL (using the Java RDP client/server plugin). The SSL connects fine and works fine. ...

Any one have a url pointing to this image or an FTP address I can goto for a acopy will save my life , thanksPeter@it-123.co.uk

1. Why doesn't "drop log" policy-map action send unreachables? Is this a bug or feature?2. Why doesn't ZPF control multicasts terminated at the self zone (EIGRP, for example), so it is not possible to control which multicasts are accepted and which a...

I need to get a new activation key so as to enable VPN-3DES-AES

Hey all,A client for whom I have to configure only the switches wants the following:There are two internet connections from two ISPs. The primary internet connection is the 'live' connection, the secondary is not used.With the failure of a firewall o...

Recently, we are trying to setup a L2L connection to a vendor. We are in 192.168.1.0 network but the vendor is in 10.10.100.0 subnet. Because the vendor doesn't want to route my 192.168.1.0 network in their network, they want us to translate our su...

We currently have a 3015 doing our VPNs. We are looking to move that to our 5520. RADIUS with password epiry is being used for authentication on the 3015 and we would like to continue to use it. Reading the docs for the ASA I have found conflicting a...

Reading the config guides I can't seem to accept that my colleague is correct in saying its possible to do a non disruptive system/signature upgrade on an ASA 5520 with an AIP-SSM-10 module. Can you do a nondisruptive system/signature upgrade?

Hi, I have an ASA 5520 AIP-SSM 10. I'm having a consultant in to enable and upgrade our IPS on our ASA from 1.5 to 1.6 so it's intergrated into the ASDM (sounds difficult). He said I need to plan what policies we need to enable for the interfaces a...