Network Security

WE have our PIX version 7.2(2) using http inspection and set to drop protocol violations. The problem is, that it drops the Microsoft Updates. Anybody have an idea how to allow the MS Updates to work while still using the inspect http policy.

I just unboxed an asa 5520 and it has version 7.0.(6) on it. Figured I'd upgrade to start with. What is the difference between the asa and asdm codes on the box? I'll be using this device for two purposes. 1. Terminate ipsec PtP tunnels from remote l...

Hi thereWe need to check which certificate is used in a VPN profile. We can't use CertSubjectName because there are two certificates with different purposes but same Subject Name. The only difference is found in Serialnumber of the certificate.How is...

I'd like to know if anyone has seen this with a 3310 NAC appliance (HP Proliant). It doesn't apply to the 3350 appliance.I know there are two ways to load software into a NAC appliance, use an external machine or a KVM setup.We have noticed that whe...

Hi all, Hi have an ADSL router with dialer wan interfaz and negotiating IP with the ISP. I am doing NAT as well. I have several static PATs configured for publishing some services. I have no ACL configured more than the one in vty line for ssh access...

Upgraded a 5510 to 8.0 yesterday. At some point last night all access to inside services from the outside stopped. After several hours of complete frustration today trying to get it back up I found that a command had been added. sysopt noproxyarp out...

Hi.I having a problem.I am using an single ip address in the local pool.The first connection is asstablished.But when i disconnect and the reconnect, i get the error"no ip address is assigned".When i look at the vpn router the only address in the loc...

Hi,I have 7.0 version on ASA 5520 with UR license. I want to upgrade it to 7.2.2. Do I have to manually enter activation key after upgrade? If i have to do that, what is a procedure: show activation-key before upgrade, and afrer upgrade activation-ke...

how can i configure GRE tunnel over FWSM?IS this possible? Is there any Doc for that issue?Can anyone verify if FWSM or Pix(7.2) support GRE tunnels? We'd like to pumprouting info across it and we're not sure if it is supported. I've donesome resea...

Hi.Has anyone set up ACS security for SSL/Webvpn Tunnel Groups on the ASA.I want to set up multiple tunnel groups for different SSL VPNs and control Authentication via ACS.How do I ensure that when the user has Authenticated, he can only access a par...

Hi! I configured a remote vpn on a Cisco Asa 5510 (ios 7.1). All clients which establish a vpn connection can ping or reach other servers on the remote lan, but the Cisco Appliance doesn't assign them a default gateway - it remains empty. With operat...

I need to set up a site to site vpn but the company I need to set the connection up with needs me to change the ip addresses of the systems that they will connect to due to having the same ip subnet on their end. So for example they want me to mask ...

I have just configured the firewall with all the standard configuration but I can not gain SSH access. I have attached the running-config below, can someone please let me know what am I missing. I have configured the SSH exactly as stated at :http://...

Hi,We have a Cisco ASA Setup that is configured for VPN for Remote Access to our Internal Network.Without any configuration change on the firewall, we have observed that even though the VPN gets connected, no active traffic passes through the VPN Tun...