Network Security

After upgrade to 4.2.2, we are getting lots of inbound packet error rate high for some unrouted vlan in Cisco 6509. I did some sniff and find that MARS try to get ifInErrors of those unrouted vlan. But the unrouted vlan only support ifOutUcastPkts an...

I've got two DMZs. DMZ1 has the web server with security level 50. DMZ2 is a guest wireless network with security level 10. DNS points to outside. DNS doctoring works fine from the inside for the web server (i.e. when an inside user browses to http:/...

I have the ASA 5510 with CSC Plus installed on a network that also uses ISA 2000. I am having some issues with clients trying to connect to the internet. We often experience bad header errors and also have problems with certain sites like Orbitz. Whe...

My CA has emailed me a root certificate that i need to install on my pix before i can request for a ca certificate. I added all the necessary details using the ca command but cannot make a ca request because the pix doesn't have a root certificate. H...

I am in the process of setting up our PIX to auto-update clients. I have the webserver configured. Can anyone provide with the syntax to add this to the config?

Hello there,I have configured CAS and CAM. I want my users to authenticate using AD SSO. I have followed all procedures outlined in the CAM configuration guide(allow access to AD on Unauthenticated role, create the cas user, run the ktpass command et...

If we have two ISP's and want to achieve redunduncy for IPsec VPN using Cisco PIX Firewall? Is this possible? If yes how?

Hi,I have ASA 5505 running IOS 7.2(3) and ASDM 5.2(3). I configured remote access VPN with IP Pool 192.168.1.0/24. I can connect via VPN to the ASA but I can not access any resource on the LAN (192.168.0.0/24). I couldn't even PING the server on the ...

Hi,We have a number of customers who have PIX 501/506E with VPN clients ranging from two to about ten for each customer. Clients have VPN Client version 4.8.0.1.0300 or version 5.0.02.0090 running on Windows XP or Windows Vista.Recently some of these...

Hi,I am having trouble configuring remote access vpn using ASDM [ASDM Version 5.2(2)] on ASA 5505 [ASA Version 7.2(2)]. I get the following error message. Please help!!!ASDM received message(s) below when one or more of the commands below were sent t...

Hi, I don't know why it's started doing this, but when I view my Cisco ASA config via telent and do a "sh Run" then it scrolls through all the config until it gets to the bottom!I want it to do the usual and allow me to hit the space bar or return ke...

Dear all,I can not access telnet or http from outside...... I m trying to accesstelnet or http using IP 10.5.213.22 Working Running Config is life this ..... sh run : Saved : ASA Version 7.2(2) ! hostname ABB-ASA5505 domain-name cisco.com enable pass...

Hi All,I am planning to put up a proxy server on our internal network and would like to see if this is the best way to configure my ASA (7.2(2)):(1) Proxy located on internal network(2) All client browser will be set (Internet Explorer) to use the pr...

Hi all, what is the normal way of denying traffic to a dmz, if from the inside all is allowed, would i just create an access list on the dmz outbound ?

Hi, on my ASA I have added the following for SSH2, but what do I need to do next?ip domain name domain.comIP SSH version 2crypto key generate rsaWhen I log it says it needs a username and password. I have a level 15 username and password that I use f...