Network Security

Is it possible to connect two ASAs in active active manner as shown in the attached diagram? Can I assign same subnet addresses to two interfaces on an ASA? Alternatively, does the current ASA code allow the same VLAN ID to be used across two interfa...

I am trying to get a site-to-site IPSec VPN working over a corporate LAN. It works fine but for redundancy, I am trying to get OSPF working. I am using RRI on F1 to the R4 network into OSPF. The problem is that F1 announces that the next hop to R4...

I have just configured the firewall with all the standard configuration but I can not gain SSH access. I have attached the running-config below, can someone please let me know what am I missing. I have configured the SSH exactly as stated at :http://...

Our internet goes down after being up for about an hour. To get it back, I power off and power back on our Cisco Pix 515 E. Can anyone give me some guidance as to what the problem might be?Thank you in advance.

WE have our PIX version 7.2(2) using http inspection and set to drop protocol violations. The problem is, that it drops the Microsoft Updates. Anybody have an idea how to allow the MS Updates to work while still using the inspect http policy.

I just unboxed an asa 5520 and it has version 7.0.(6) on it. Figured I'd upgrade to start with. What is the difference between the asa and asdm codes on the box? I'll be using this device for two purposes. 1. Terminate ipsec PtP tunnels from remote l...

Hi thereWe need to check which certificate is used in a VPN profile. We can't use CertSubjectName because there are two certificates with different purposes but same Subject Name. The only difference is found in Serialnumber of the certificate.How is...

I'd like to know if anyone has seen this with a 3310 NAC appliance (HP Proliant). It doesn't apply to the 3350 appliance.I know there are two ways to load software into a NAC appliance, use an external machine or a KVM setup.We have noticed that whe...

Hi all, Hi have an ADSL router with dialer wan interfaz and negotiating IP with the ISP. I am doing NAT as well. I have several static PATs configured for publishing some services. I have no ACL configured more than the one in vty line for ssh access...

Upgraded a 5510 to 8.0 yesterday. At some point last night all access to inside services from the outside stopped. After several hours of complete frustration today trying to get it back up I found that a command had been added. sysopt noproxyarp out...

Hi.I having a problem.I am using an single ip address in the local pool.The first connection is asstablished.But when i disconnect and the reconnect, i get the error"no ip address is assigned".When i look at the vpn router the only address in the loc...

Hi,I have 7.0 version on ASA 5520 with UR license. I want to upgrade it to 7.2.2. Do I have to manually enter activation key after upgrade? If i have to do that, what is a procedure: show activation-key before upgrade, and afrer upgrade activation-ke...

how can i configure GRE tunnel over FWSM?IS this possible? Is there any Doc for that issue?Can anyone verify if FWSM or Pix(7.2) support GRE tunnels? We'd like to pumprouting info across it and we're not sure if it is supported. I've donesome resea...

Hi.Has anyone set up ACS security for SSL/Webvpn Tunnel Groups on the ASA.I want to set up multiple tunnel groups for different SSL VPNs and control Authentication via ACS.How do I ensure that when the user has Authenticated, he can only access a par...