Network Security

Hi,I have 2 locations. Location A & Location B.VPN client connection will terminate to Location A firewall (ASA 55520). Users will get ip from the vpn-pool created into Location A firewall. By using this IP users will access a mail server that is loc...

Yes, the ASA outperforms the old PIX in all categories except one. Has anyone noticed that the amount of IPSEC vpn connections in the ASA is drastically lower than its PIX predecessor? Could it be that the ASA is now doing software based incryption v...

Upon adding a IOS IPS device running (C2800NM-ADVIPSERVICESK9-M,Version 12.4(15)T1,)& 5.x-303 release signatures, CSM 3.1 does not display it as an IPS enabled device. The device in question (2821) has a stand-alone config and 5.x advanced signatures...

I am having trouble with IPSecs dropping every few hours. I would like to capture some debug info to see if I can figure it out. When I do "logging buffered" I get way to much info and find it hard to decipher. Is there a way I can use the "debug cry...

I have an IDSM version 6.x set up to monitor both directions of traffic on a Cat6500 VLAN with an average 150mbit/s traffic. Except during low traffic times the missed packet counter is almost always at 23%, is this too high? Is there something I can...

I have just made two ipsec vpn connections to our main office PIX 515 v6.3 using Linksys WRV200 and BEFSX41 at remote offices. Everything is working like charm between SBS 2003 server and remote locations. The problem is with our terminal servers (Sc...

My ASA is running OS 7.1.2. Routing is handled by OSPF and static routes. No default or 0.0.0.0 route is defined or learned. I want to add a default route but not advertise it with OSPF. How would I do this? I am was thinking distribute lists but I c...

Hi,Our customer has two ASA5550-K9 and asks us to configure both firewalls in transparent mode. These firewalls are design to protect traffic between outside and inside.The 1st firewall's outside interface connect to first router 3825. The firewall's...

All,I had a situation where traffic needed to be blocked from one subinterface on the ASA to another, Security-level was setup the same with appropriate NAT and intra security level permissions. The thing was that the ACL needed to be placed signifyi...

can anybody expalin me multicasting functionalities

Hi,does anyone know if the ASA 5500 support http redirect. for example, a pc on the internal network access www.cisco.com and he gets redirected through a proxy server on the internal network instead for login etc.... This saves the customer going th...

When a workstation behind the ASA tries to initiate an AT&T client authentication session the following happens on the ASA:-3-way handshake completes to the auth server.-Push packet from the client hits the inside interface of the ASA but does not ge...

I have pix515E with 6 interface. Now one outside interface configure. But i want to create two outside interface. That means that two internet connection attach directly on pix515E.Pls suggest me what is procedure to implemented it.

I have read several posts on this and I still don't quite understand what needs to happen. I have a web server in the dmz (10.10.30.10) that needs to access a SQL server on the internal network (192.160.0.7). How do I allow this access. I currently c...

I wasn't sure how to title this exactly, but here's my problem:We have a web server inside the firewall with an inside address (inside). There is an outside address (outside) that is routed in through the firewall to that server.The DNS, of course, r...