Network Security

Hi,If I use 2 asa 5510 with HA in mode A/A or A/P Is it possible in A/A mode to use one IPS module, except for security problem ?Or is it preferable to use asa as A/P.Regards

I have set up a VPN to a Watchguard Firebox. I thought it was a relatively easy build but now whenever the SA timeout occurs (8 hours), the VPN tunnel stays down. When I do a sh cry it appears to fail on the key exchange. Once, the remote site tech ...

Threat detection provides the option to shun addresses once a threat alarm has triggered. What is the shun timeout?

I want to put the ISDM "in-line" between my internet edge router and my firewall (FWSM which is in the same chassis as the IDSM). In order to have traffic flow from the internet edge router into the IDSM, then out of the IDSM to the FWSM, I will need...

Hello !!I am having some problems with ssl vpn and anyconnect client in asa 5505.The problem is, when I run the configuration wizard for SSL vpn, I follow the instructions and I type address pool for vpn users, add the anyconnect client, (anyconnect ...

I have the same scemario as in the example mentioned by the link below, but it doesnt work. I have opend a case with Cisco, got to tier 3 with no resolution ...I basically need to access from inside my DMZ servers on both the public and the dmz IPs. ...

Dear All,I have 1811 router with SDM , I wanted to enable the firewall capabilities using SDM to be in the medium level , in order to deny peer to peer and instant messengers.but I found the medium and high security levels are disabled.my IOS version...

Good day;PIX 525 with L.A.N Base stateful Failover U.R Bundle.PCI 1 - PIX-4FE-66PCI 2 - AvailablePCI 3 - VAC+First PIX-4FE-66int2 - is a DMZint3 - availableint4 and 5 Statefull FailoverProblem:When I install a second PIX-4FE-66 in PCI 2 of both the p...

Hi, we have an ASA 5510 with about 140 defined rules in the security policy.In our company there are some complaints about the performance throughput from one network (inside) to another (dmz).For example, we have a ecommerce platform that resides in...

Hi,I've a question concerning failover. My problem is that my customer has only 2 adresses for the outside interface (with a 255.255.255.252 mask). So we cannot configure a standby ip for this interface as the second ip is for the provider router. Is...

I'm trying to setup an SSL VPN box within a DMZ using a PIX 515. Basically I've setup the SSL box with a DMZ IP and NAT'd this to an external IP. I've put the following ACLs in:access-list INCOMING permit tcp any object-group SSL_BOX object-group WEB...

can someone advise me how i go about erasing flash on a pix 501 running 6.3(5)i am having boot up problems and would like to re-install the ios into a nice clean flash.regards Melvyn Brown

Hi! Greetings to allI have a Cisco ASA 5510. I need help with the basic configurations. I have a DSL Internet connections connected to the outside (Ethernet0/0) and my office network connected to the inside (Eth 0/1). I will require a DMZ interface l...

Hi,we have a remote site with 1 asa 5005 and 1 pix 501.the pix 501 has 2 existing vpn tunnels to networks 192.168.42.0/24 and to 192.168.48.0/24.the asa has another tunnel (easy vpn) to 192.168.1.0/24I added an inside route on the asa to .48 and .42 ...