Network Security

Hi all,Can we use a single Virtual Context for filtering traffic from Multiple VLANs?. It should be any how possible b/c we are having a license of only 20 or 22 Virtual Contexts & lots Customer VLANs.I tried to make a 2nd SVI(int Vlan56) an Internal...

Hi , I've a question more related to design in here .I was looking for a solution to actively monitor the use of P2P programs and block them .The problem , I think , is quite well-known but I'd like to have some opinion about the effectiveness of ASA...

we have a cisco 7600 with vpn spa module, and i have to specify ip address on switch outside port for example on GigabitEthernet 4/48 (swicth outside port).Now i want configure vpn spa module,i know i must configure port vlan (layer 2) and interface ...

While I have experience with the 42xx sensor appliances I have not previously worked with the nm-cids modules. I have been told though that they are limited to use about 100 signatures. From their talk about memory and cpu restrictions it made sens...

Hi, im hopeing someone will be able to clear this up for me.When you get a RESET-I message in your syslogs, what does this mean ?I know this is reset from the inside, however what is the inside ?Is it the host that initiates the connection ? or the h...

Can someone explain the traffic on a dual 6509 active/standby FWSM scenario?We have two 6509 with FWSM installed in two different buildings and FWSM are running active/standby failover.If the internal traffic reaches the 6509 with standby FWSM instal...

Hi,Two questions:1º Is good to drop all high virus signatures?2º IPS is activated to inside interface, this interface supports vpn conection.There is activated drop icmp attacks, but sometimes, packets from VPN are dropped.Is possible to add/create...

We have an internal https server that we cannot access. The statement on the router is (permit ip 172.31.2.2 0.0.0.255 any) can anyone help please?thanks

I have just received a 3310 Network Access Control Appliance and a 2106 Wireless LAN Controller. Phase 1 of the NAC implementation is to setup an internal wireless network for our employees and guest which will be inspected by NAC. I have seen some o...

I have configured reomote access VPN in my CISCO ASA 5520 version 7.2.It's working fine in cisco client but not working for windows client using L2TP over IPSec.I have configured it through ASDMVPN WIZARD>Remote access VPN>select Microsoft windows cl...

I have 2 Pix 525 .it works as Active/Standby .in my case the Active is the secondry and the standby is the primary Pix. we use Failover cable and stateful failover together .the Sync/Failover is working fine butWhen i configured subinterfaces on the ...

Hello,We currently have a Pix 515E firewall with a webserver & ISA server on the dmz. My client has just bought a Nokia checkpoint firewall and want it installed on the inside of the pix.( ie two teir firewall configuration)My question is:Where is th...