Network Security

When a remote vpn client connects he can ssh to dmz network but cannot able to do ssh on the internal network.There are 2 types of VPN are installed. First is Site-site and the second is remote vpnclient. please help me out.

HiI have just been asked to install a ASA 5510 into our network. I have never used an ASA device so i am looking for the best way to connect it into the network. It will be connected to a 3560 switch. which is part of a vtp domain with 15 vlans. Can ...

I have only 1 outside address, and I PAT to several inside addresses. But only one protocol works inside. I can connect to port 80 but not 25.ip nat inside source static tcp X.X.X.C 25 interface FastEthernet4 25ip nat inside source static tcp X.X.X...

I need some help. I am trying to setup out new ASA 5510, and I am stuck. Everything looks to work with my internal and DMZ interface, but I am having a problem with trying to contect out to one of our clients sites via VPN. We use Cisco VPN to con...

Hi,Just a couple of simple and quick questions for you. I have in my test use a PIX 515 and I noticed its out of date model that didnt even have info on it on Ciscos site (that i could find).Is the only major difference between these 2 devices that P...

Hello, I have CBAC configured on an ISR and was wondering if temporary openings in ACLs will always show up when comitting the "show ip access-list" command. My assumption is that CBAC is not really opening temporary ports on acls at all if it d...

Hi there,We have recently implemented a VOIP system here and are currently having problems with remote users. Basically, they cannot have a conversation unless they keep trying and then it will work maybe on the third or fourth time.I have checked th...

Hello, I have a general question regarding firewalls, but specifically as it pertains to the CBAC firewall feature set on, say, a 2811. Assuming that I have an ISR with a serial interface on the WAN side and an Ethernet as the LAN side, an ACL s...

Trying to connect a remote client using SSL VPN through web interface. When attempting to ping LAN side (192.168.1.2) through inside interface I am getting this in the log -Deny icmp src inside:192.168.1.2 dst outside 192.168.50.1 (type 0,code 0) by ...

Hi Guys,I did some research how Cisco IPS HA works, but no lucky to find out based on followed statement, anybody can explain how to achieve this ?"Resiliency and redundancy can be delivered through unique network collaboration; for example, Hot Stan...

The the light on the branch office ASA5505 VPN is green. We can ping the public IP. We are not able to start a telnet session on the ASA's public IP "Could not open connection to the host, on port 23: Connect failed". Telneting to the ASA's private...

Does anyone know of a way that i can turn on Secure desktop for on group policy and not turn it on for another one? Meaning if i login as one group policy SD wont run, if i login as another it will download an run

We currently have a Catalyst 6509 which terminates the IPSec/GRE tunnels. We would like to then connect our ASA5540 to this 6509 to inspect the traffic once the packets have been decrypted and then send it back again to the 6509 to route it to its fi...

Dear All;i have PIX 525. i have configure PIX in such a way that my all Exchange, VPN, any inbound traffic would cross the firewall. i also define some conduit against smtp, imap, www, pop3, https. now when i tried to implement a Access-list on outsi...

Dear All; i have PIX 525. i have configure PIX in such a way that my all Exchange, VPN, any inbound traffic would cross the firewall. i also define some conduit against smtp, imap, www, pop3, https. now when i tried to implement a Access-list on outs...