I need to allow a screen capture/keylogger component of some software we use to function. The software records phone calls and matches them with key strokes and screen captures for customer service management.This software uses \WINDOWS\System32\Driv...
Is it best to use the default Groups in the CSAMC such as desktop, laptops and servers instead of cloning them and then using the group? What is the best practice or advice?Thanks,
Hello,We have CSA MC v5.2. I have put a pre-defined CSA on a server (seperate from the CSA MC), which installed successfully and the MC sees the host. However, although a pre-defined CSA is successfully installed on a host (non-server), I am unable...
My customer has an ASA running 7.2.2, a Cisco 2950 switch and a Cisco 2621XM, the router is located at the outside interface of the ASA, which IP subnet is 172.16.1.0/24. End users and a FTP client are behind the ASA, that means all the clients are l...
I am subscribing to a spam filter service that requires inbound access through my PIX. I need to allow 5 different IP addresses for smtp traffic. Will this configuration work?access-list outside_access_in permit tcp 12.158.34.0 255.255.255.0 host 6...
Hello everybody,i'm new into the whole PIX thing, so i'm sorry if my question seems to be "easy". :-)I was looking at the config of a PIX where i need to do a upgrade of the IOS and the ASDM via CLI. If i compare it to a router, where i know what i'm...
Hi All,I have three pix's connected to three external Wan Links.I am wanting to share each pix default route to one another so I have ISP resiliency. It is mainly for load sharing, so I can maximise on bandwdith not being used, on low user sites.They...
I am migrating from the PIX to the ASA platform. We use non-standard ports for the FTP application. This was easy enough to handle on the PIX with the "fixup protocol ftp 'port#'" command. I need the ASA to inspect FTP Application traffic and usi...
Can I have on PC on the inside of my firewall say 192.168.2.2 go out through my firewall on ports 6000 and 6010, but show up on the other side as two IP's depending on which port it is talking to.So,192.168.2.2 port 6000 would translate to 192.168.8....
hi all,I have a document in that it got details like these.pix535 model:rated output:1gbps+upto 95 mbps 3des vpn,2000 ipsec tunnels,concurrent connections: 500000i would like to know the exact meaning of this representation.thanking you,prashanth.
Hello,I have established a site to site VPN between two Cisco 2811 routers. I need to work with MS Remote Desktop with some PCs. Although I can open a Remote Desktop connection from outside the VPN (using NAT), it is impossible to do so through the V...
Hi,I normally use the configuration below to block the ftp/get command on my ASA v7.1. But, after upgrade to v7.2, the 'ftp-map' command has been deprecated. We need to use Use 'policy-map type inspect ftp' instead. I found the only actions to ftp co...
If you issue the "sh crypto isakmp sa" command, what determines whether the tunnel shows up in the list?For example:When I issue this command, I see some as QM_IDLE and MM_NO_STATE,But I have one tunnel that just gets dropped from the list.Does this ...
