Network Security

I have been having some trouble setting up a VPN on my PIX 515e. I tried to use the ASDM but it acts quite fussy about connecting. It will connect and then drop connection and back and forth so I am just going to use the CLI. I was reading through th...

When you are defining filters in CSM, is it possible to use several IPs or ranges of IPs in the "Attackers" and "Victims" tab?Thank you

Hi All,We recently installed an FWSM on a 6506 chassis. however we encountered a "different trust states" hardware error on Cat6506 when we insert the module. Anyone know how to resolve this? Thanks in advance c",)

Hi,I need your support to identify a correct IOS for my routers to enable SP Services. Please see the attachments to see the show version of my present routers.Will the IOS for 2621XM and 2610XM be suitable for the cisco 2610 (MPC860) and cisco 2621 ...

Device Status > Connection Status: "Status unknown. IEV server program may not be running."And I get this error when I click 'update' in device properties: "IOCException: Connection refused: connectIEV server is not responding. Please check if it is ...

We have a requirement to NAT every site-to-site VPN host into a specific range of IPs. For example, A remote host is 10.1.1.200, we need to NAT this on our ASA to 172.24.202.1 through to the destination network.. This needs to be a 1-to-1 static nat ...

On the PIX/ASA, I know that traffic that originates from a higher security interface is considered outbound, but what about the return traffic for that connection. Is the return traffic considered inbound or outbound? Do counters classify the traffic...

I'm looking for configuration examples for the 65xx doing VRF-lite together with the fwsm. So far I haven't found any, any ideas?Thanks in advance.

Hi, A client of mine is looking at controlling user access to the Internet based on identity. I know Microsoft ISA and other proxy solutions would do. However, I am looking at leveraging their present installation of ASA and Microsoft AD to provide t...

I has tried migrating the PIX os from 6.2(3) to 7.2(3). After the upgrade relevant configurations has changed to the new command syntax. But i got an error with the NAT acl "access-list has protocol or port" and iam unable to go thro' the entire stat...

Trying to get a VPN tunnel up from an ASA 5505 to a Watchguard X1000 firewall at our colo. I'm a total newb at Cisco VPN configs, so I've probably got something monkeyed up...By the debugs, it looks like Phase 1 and Phase 2 both are coming up, but th...

Hi,Because same subnet are being in use between two sites local network. we have configured NAT overlap on IPSec VPN tunnel using ASA 7.0 and its working fine.But now on site where overlap NAT has been configured, users can not access internet.if we ...