Network Security

I'm confused when to use a Tunnel Group - if ever - when creating a Lan-2-Lan IPSec VPN tunnel between two ASA-5540s. For standard configuration does one work mainly with Crypto Maps? When does one work with Tunnel Groups?

I'm having some trouble configuring NAT on FWSM on transparent mode. I think I have the NAT configuration right. but the firewall does not want to accept the packet from the upstream router. I'm trying to nat 172.20.99.240 to 66.37.67.121I have a rou...

Dear friendsJust a query about operating IPS 4255 in inline mode. Currently, it is operating in promiscious mode. Now, i am planning to change to inline mode for just one segment (Internet vlan - 15) connecting the 4507 core switch 4507 and the 515 f...

I'm experiencing what I believe to be a false positive on the BO2K-UDP (4055) signature. As near as I can tell, it is getting triggered by Xbox consoles when they connect to the Xbox Live! service. I am currently running the S307 sig update. What is ...

Hello, I am trying to figure out what the difference is between K8 and K9? Cheers!

When going thru the ASDM VPN wizard and defining source and dest hosts for access, it creates a generic ACL name like 'outisde_2_....'. I want to be able to name the ACL something that makes sense. How do I do that easily without having to make chang...

I followed the instructions on document ID 8529 to reset the password on my Pix 501 and after the uploading via tftp the file to the PIX 501 it just hangs and does nothing. Any ideas?

I have a cisco router running IOS 12.3,c2600-ik9o3s3-mz.123-12.bin. I've enabledssh on the device so that other administrators can ssh into the device foradministration purposes. I want to disable the DES feature from the device. In other words, curr...

Dear friends, Need an immediate help. How to get a partciular product updates in IOS, Firmware, Patch release?

Hi We run PIX525 ver 7.01 and get following error when traffic from inside to dmz:2007-04-17 20:31:56 UTC Local0.Info 192.168.252.1 Apr 17 2007 04:08:23 : %PIX-6-106015: Deny TCP (no connection) from 192.168.1.x/443 to 192.168.0.x/1911 flags RST ACK ...

I got a Tivo for Christmas and I'm trying to open the appropriate ports on my PIX 501 to allow it to communicate with the Tivo service. The Tivo knowlege base says I need to open these ports for inbound and outboud access: - TCP 37,2190,4430, 7287-72...

i am using and asa5520 with ios 7.2(3). I have assigned all interfaces into security level 0. I have configured access lists to permit traffic through the interfaces but all traffic is denied. when i allow traffic between interfaces with the same sec...

Hello, I am using an ASA 5540 VPN edition to terminate VPN connections from software clients and PIX/ASA boxes using EasyVPN (in network extension mode). I am trying to get the PIX/ASA remote networks and the VPN Clients to talk to each other (they b...