Network Security

I have a basic conceptual question. If an ASA is using dynamic routing (OSPF), has multiple physical paths to the Internet (for redundancy), and a l2l VPN tunnel established to another site, does it look to the routing table prior to encrypting the p...

Hello,I have configured an ASA 5510 at our data center. The problem I am facing is that in the network range of 0 to 255 there are servers with /24 masking and these are already routed by the router. I want to deploy the ASA firewall only to 6 of the...

Anyone know how to do this? confreg through rommon does not set it anymore.

Hi,How many additional slots can be used in ASA 5520?Means can I use one 4GE SSM and one AIP SSM along with the default module installed in slot 0 of 4 gig ports?Thanks in adv.Souvik

I have a pair of 5520s in production. Due to a licensing mismatch the HA was disabled recently. Until I get that resolved, is there a way to do a manual failover somehow in the event that the primary ASA dies? i looked for a link to some docs but did...

Hi all, is there any reason why i cannot tftp my config from my asa via a vpn tunnel to my remote site, do i need to put in an access list for this ?

Hi,I am faccing the following problem.When I ping the inside interface IP the following result ,please help me to resolve the issue.Reply from 10.1.1.100: bytes=32 time<1ms TTL=255Reply from 10.1.1.100: bytes=32 time<1ms TTL=255Reply from 10.1.1.100:...

I'm looking for a way to monitor the number of site to site vpn tunnels on an ASA5510. There is an OID for the global number of IPSec tunnels but that includes the remote access tunnels, which I don't really care about those dropping.Anyone know of a...

I have an ASA 5510 set up with dynamic VPN from the Internet and have a working config to give VPN users access to the Internet through the tunnel while using VPN. I need to do a second dynamic VPN from the DMZ interface with access to the internal n...

Today, in the newest versions of IOS, the guest vlan is just for devices that don't speak EAP. With this user of Windows XP, for example, they don't enter in Guest VLAN (because Windows XP speak EAP!!). How do I do for the users guest be addressed fo...

I previously had several pix's with PPTP setup and running the vpdn pptp tunnel to all windows user direct access into networks. It seems as though PPTP is not supported on the ASA. Is this true?

My company recently purchased 35 ASA 5500 series device to replace Sonicwall FireWalls. To make the Cisco deployment a painless one, I have decided to install a 5520 in parallel with the sonicwall at the corporate office. The cisco will be given the ...

I was once told that the speed had to be set to 100Mbs on the Failover link when using LAN based failover on a Gig switchport.

I have one PIX 501 whose configuration am trying to copy to TFTP before upgrading the activation key to allow for VPN-3DES, however, i find that i cant runcopy flash tftpand the only available commands are "copy capture: <capture-name> tftp:"How does...