Network Security

I have two ASA that connect to the Internet. I don't do any static NATTING on my inside network. My users have been trying to establish a VPN session using Microsoft VPN but without much success. First Firewallccess-list INSIDE line 244 extended perm...

Hello everyone, I'm in the middle of deploying a NAC solution and I was able to find documentation whereby I can CHECK if certain services are running. I tried making a rule to check if the "Messenger" service is running so that NAC will ask you to d...

Hello all I was hoping someone can shed some light on a problem I am having with my ssl vpn client install. The problem is when a user connects with a PC that doesn't have the client installed the activex install pops up at the top of I.E. and if the...

Hello:When I try to remove an access-list with the "no" command it doesn't remove that entry! I am not sure what I am doing worng here...for example, if I enter:no access-list test permit IP any anyI still see this entry in the running config.any tho...

Hi,Our supplier has configured IPS on ASA device. With changing to session mode and then making some configuration. But we are unable to test that it has been configured properly or not. Is there any way to check wheather it has been configured prope...

Hi,Does anyone use Websense inline with their Cisco ASA for web filtering?I'm trying to get my VPN's and client VPN's and Internal users have their web pages filtered and blocked based on our company policy.Or failing that see if our ISP provide web ...

Is it possible for an ASA to proxy-arp for an IP, and forward requests for that IP to a different destination?Scenario: We removed our internal DNS server to a completely different facility. The network is to be completely dismantled. We just found o...

I have noticed that connections going from one dmz to another have two entries in the ASA log, one "inbound" and one "outbound". I did not remember seeing this when we had a Pix. Did I just miss it before or is this a new feature with the ASA.

We are having a MARS 110R installed and the MARS cannot login to the IDS 4250 running 6.0.4E1. Access has been added for the MARS device under allowed host. Does the MARS and IDS 4250 have in compatiblity issues? The MARS is in the same subnet as the...

we are an ISP and we are considering giving managed security services to our customers, the ASA provides up to 50 security context in order to give the customer a virtual firewall. 1- do you recommend this scenario , 2-what about VPN, the multiple co...

Hello,I have a 515 PIX running version 6.3(4) which has 3 interfaces. One for the local network (inside), one for internet access (outside) and one for vpn tunnels.The problem is that when i try to configure RRI i get:crypto map mymap 1 set reverse-r...

Hi,I am new to NAC. Would you please give me hints about bandwidth/traffic policy/QoS management when using out-of-band deployment of NAC? Is it possible NAC to configure the switch port with the appropriate bandwidth limiting template when it recogn...

Hi,we have two 5520 working in multiple context mode. We try to implement outgoing QoS on the outside interface but it seems that we can't. I suppose it is an unsupported feature with multiple context mode. But there is no mention of this in the conf...