Network Security

Hi,I am trying to use the RADIUS server in the inside interface to authenticate the remote users.What happens is that the RADIUS server is using MS-CHAPv2 and the ASDM keeps sending PAP requests.When I configure the RADIUS servers I try the "Test" fu...

I am setting up some systems at a remote collocation facility as part of our disaster recovery plan and would like to know if the ASA 5505 will handle what I need.There will be 4 servers:* Exchange 2003* Active Directory 2003* Linux Server for WWW & ...

Greetings,I have a device(s) on the outside of my network that I have to access from a specific ip:port on my network.inside ip: 192.168.1.1firewall ip inside 192.168.1.254firewall outside: 172.25.25.25i have to access device from 172.25.25.27:9000de...

I'm sure this is standard stuff, but I cant figure it out. I want to allow MS VPN connections initiated from inside to get out a PIX 501. Any help?

On an ASA 5500 I have setup basic extended access-lists (eg access-list inside_access_out)My connections work, however I am seeing alot of Denies such as:Deny tcp src 192.168.1.1/80 to 192.168.2.1:65535 which is the reply to a connection started on t...

My ISP has given me two different ip ranges, a /30 and a /29. The /30 is to connect to them, and the /29 are all mine to use.Normally, I'd set up a router to translate between the /30 and the /29. give the router the first address, the fw the second ...

Hi,After upgrading my asa devices (2*5510) I started to getting odd messages which relate to lan-to-lan connection between these:Dec 4 03:18:15 stasa1 %ASA-3-713227: IP = A.B.C.D, Rejecting new IPSec SA negotiation for peer D.C.B.A. A negotiation was...

I have 5 (soon to be PowerEdge servers that I want to firewall and have only certain ports (HTML, RDC, FTP) open. Each server has its own IP on the web. Wire comes in, goes to a 3COM switch, then to individual Linksys routers, then to the Servers. I ...

Why does the Firewall Services Module source the mac-address of the inside interface and not the mac-address of the outside interface when passing traffic outbound out of the outside interface to the outside world?

Hi to all,I have a problem with a virtual workstation XP SP1 (VMware) with VPN connectivity: when i accessed as standalone user i don't have any problem, but when i put it into domain and login with a user domain account, the login process crash (onl...

I've received a new asa5520 with aip-ssm (ssm-20). I have upgraded the ASA image to 7.2(3) successfully. I am trying to upgrade the SSM module from 5.1(6)E1 to 6.0(3)E1. I have the following connectionsSensor IP: 10.0.0.3ASA G0/0: 10.0.0.2Gateway: 10...

I had the 5505 installed about a month ago and it was working great, showing events. But as of today it shows nothing. I go to the Real-Time log viewer in the ASDM, choose Informational (or any other option) and it brings up the real-time window but ...

Have an ASA running v8, trying to figure out how to block inbound Cisco VPN client traffic to the external interface and only allow 1 block of public IP's to initate the connection. I have created access lists blocking all inbound traffic on the exte...

I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what...