Network Security

We have a site-to-site VPN set up between our HQ (10.10.0.x) and a remote site (10.20.x.x). The HQ device is a ASA 5540, and the remote device is an ASA 5505. version ASA 7.2(2)The tunnel is up and passing traffic. I can ping from any device on the H...

Does a PIX 501 provide URL filtering based on URL name? If not, can you recommend a better Cisco product for a small business?

I need to upgrade the ASDM on our FWSM and according to the Configuration Guide I need to do it from the system execution system becuse I'm using multiple contexts. However when I test the connectivity by pingig my tftp I get replies ?????. What am I...

is it possible to establish two IPSEC VPN tunnels to a single remote peer? I currently have two ISP connections and i wanted to make two tunnels for failover but im not sure if there is an issue on the tunnel groups since i would end up having only o...

What is the correct why to open a group of ports like 5555-5585 TCP and 2326-2373 UDP for video conferencing.

HiI'm experiencing a strange problem with NATing on a PIX 515 running 6.3. I have 2 statements:nat (inside) 1 10.0.0.0 255.0.0.0global (DMZ2) 1 192.168.194.0 netmask 255.255.254.0With this config I can get no packets at all to pass from the inside an...

I want to see which items are modify.show run command show all running configuration.But i want to see only modify record.

I have a Pix 515E active/failover IOS v7.2 The failover process works perfect. I test powering down one unit, and then the other en works perfect. But, as soon as I do "write stanby" in the active unit, the passive unit goes down (the insde interface...

Hi Sir,I have an FWSM installed in a Catalyst 6509 in module 4. The FWSM runs software version 2.3(3). The Catalyst 6509 runs CatOS 8.3(4) on Sup720.Today I can't session into the blade from the Catalyst 6509 switch. I receive the following error:Cat...

when configuring our PIX through the ASDM we keep getting the this error message " [error] wr mem ASDM recieved an error while sending this command.Click Resend and,if the browser prompts you to verify a new certificate or to provide a ...

I have a couple 26xx's running SNAT. They are front-ending a connection to an ASP. I'd like to replace them with ASA 55xx's. Can ASA's do Synchronous NAT?Thanks, Mike.

HI, I have 2 questions.Is it possible to change the password of the VPN client password dynamically without the need to redistribute profile pcf file to the clients? Can the clients connecting by the Cisco VPN software be restricted to those with a k...

I've been trying to configure CSM 3.1 to manage an IPS module (AIP-SSM) in an ASA 5510. I can add the ASA, which is running V8 software, to the CSM and push policies etc without problem. But I cannot figure out how to add the IPS module into CSM. Whe...