Network Security

When configuring isakmp key "keyname" address x.x.x.x netmask y.y.y.y - what are the allowed characters for the shared key? I did a search and found several articles that said it could be alphanumeric. I have some existing connections that are usin...

Hi,We upgraded a pair of 515e's last night from 7.2.2 to 7.2.2.22.The upgrade was fine, however when we tested both L2L and Client based VPN connections we hit issues and were finally forced to roll back to 7.2.2 due to time constraints.Our problem w...

Hi All,Here is my dilemma,I have 2x ASA 5520 v802 running multiple context and failover.I also have the AIP-SSM-20 module installed in each running v516E1.My problem is that I am unable to allocate an ips sensor to a context.I receive no output from ...

I am attempting to migrate from 515's to 5520's. Due to the ASA having fewer eth interfaces than the PIX, I am trying to bring two DMZ's (both on 2950 switches)in to a switch (also a 2950, which I'll call the "bridge") on separate VLAN's, then bring...

I have some home managed to break my outgoing VPN connections. We connect to a clients site via Cisco VPN and I originaly got it to work by createing a Dynamic NAT statment NATTIng to .120-.124 of our public IP addresses. Somehow I have managed to ...

I am unable to access a windows 2003 server at a remote location. The server does communicate with an interface server on my side just fine. I can ping and trace route to the server with no issues. Everything seems to be ok EXCEPT when I try to RDP t...

I have a Cisco827-4v c820-k9osv6y6-mz.122-15.T14.binI am setting up QoS CBWFQ over IPsec GRE VPNs tunnels My Issue is regarding Shaping inside my parent policy. In class-map configuration mode inside policy-map configuration mode I can type shape ave...

Is it possible to setup an AIP-SSM Module to log event alerts to Its local cache as well as the Mars Appliance. I say this because I ran some tests for alerts and never see them on the IPS module itself but i do see them on the Mars Appliance correct...

Hi,I have a PIX 525, erase configuration with "write erase" after boot the follow message"Cryptochecksum (changed)" displayed, and I don't have prompt for continued the configuration. What's ?

Hi all,I need to change my border router to a 1721 with one sdsl and one adslinterface. This then connects to a pix 506e but the 1721 has beenconfigured with public ip's on the wan's (each ip is from a differentrange) they are then nated on the fa to...

Hi All,I have the following scenario. We have 2 6509s running HSRP on the distribution layer. These 2 boxes are connected using Layer 2 links to the access switches. One of the access switches is also a 6509 and it needs to be firewalled off from the...

I haven't read anything about load balancing or failing over between two WAN connections so I assume the ASAs do not support it but I wanted to try and get a definitive answer. Thanks.

Which comand shows the presence of the FWSM module on the 6513 switch?

Greetings all. Apologies for the dramatic headline but I'm in a bit of a time crunch.I have a 4215 running 6.0(3)E1. The device is inline. Below is an event which triggered,========================evIdsAlert: eventId=1184881408377311643 severity=low ...

I have a pix to pix ipsec tunnel that existed before. Now that I have modified both PIX (remote and local) ACLs, I can not establish IKE Phase 2. I have established IKE Phase 1 and see the networks local & remote along with their peers.When I do a ...