Network Security

I'm thinking to buy two asa5540 and 100 ssl vpn licences. if ASAs are in active/active and if i buy 100 user licence and put it on one of ASAs and if that ASA with licence fail, are the second one inherit licence from the first one or what?

Could someone point me to documentation for cli client vpn configruation 8.0(3) using radius

I have a vpn ipsec between two pix, but now I want that all internet traffic pass by my central pix , is it possible ?

Hello all!So, I have C6500 equipped with a FWSM.Until few days ago I had on FWSM IOS 3.1.5 and on SUP720 12.2(33)SXH, and from the SUP I could do without problems "session slot 'fwsm_slot_number' processor 1".Now I upgraded the version on FWSM to 3.1...

What will happen in case when i have two ASAs in active/standby failover mode and on one of them ssl vpn licence for 50 user.Is the HA failover on ASA possible at all for ssl vpn? What will happen in this scenario if i put licence with 50 users on fi...

I have a PIX 515E with restricted license. Current, I have about 5 users connecting PIX using Cisco VPN clients for Windows XP.Recently, I plan to connect two branch offices to this PIX using site-to-site VPN. Each uses Cisco 877 ADSL router.Here is ...

I have my SSM20 operating in a passive no-intrusive monitoring mode now. I am concerned that when I turn on the IPS functionality that a lot of false negatives will cause my users problems. Is this a valid concern or shouldn't I worry about this?

I have 4260 IPS. I have heard that 5.x is not supported IEV. Only IDS with 4.x support IEV. Now 5.x require CSM for event viewing. I got the 2 CSM CDs in the 4260 box. I also have cisco works cds.Can u please guide me will these are enough to install...

Just wanting to check my work for setting up a site-to-site but only want to give access to a specific host. Is correct?# Access list to specific host.acces-list inside_outbout_nat0 permit ip 10.0.0.9 255.255.255.255 10.254.0.0 255.255.255.0# remote ...

I am getting the following error on my ASA5510;7103042 Ike Initiator unable to find policy: Inft outside, Src: 172.16.2.14, Dst: 172.16.3.1007103042 Ike Initiator unable to find policy: Inft outside, Src: 172.16.2.15, Dst: 172.16.3.100This occurs whe...

Hi all, Lets look my configuration:static(inside,outside) tcp 23.56.67.78 www 192.168.1.2 www netmask 255.255.255.255static (inside,outside) tcp 23.56.67.78 smtp 192.168.1.3 smtp netmask 255.255.255.255access-list out_in permit tcp any host 23.56.67....

HelloWe have a ASA 5540 + IPS installed here. Unfortunately the guy that installed left without leaving any documentation so I'm a bit lost with this.We have a 100Mbps FD link to the Internet. The inbound traffic (from the Internet) shows no limit (I...

Hello all,Cisco Newbie here. We have just put a gateway between our PIX 515e and our email server. This gateway needs port 4 open to receive its updates from the manufacturer.Could someone please advise the securist way to do this?Thanks in advanceSt...

I have a pix 506E and I get ~ 20 /sec of the these messages. The message is Deny tcp src outside:xxx.xxx.xxx.xxx/29977 dst inside:yyy.yyy.yyy.yyy/25 by access-group "OUTSIDE_ACCESS_IN" Where yyy.yyy.yyy.yyy is my webserver. I realize that this means ...