Network Security

Can 802.1x NAC and per-user ACLs be used together on the same port? I know some of the NAC documentation says that 802.1x NAC does not support downloadable ACLs but it looks like it might be outdated and according to http://cisco.com/en/US/products/p...

I just installed Small Business Server 2003 and am using it for Email (exchange) services. OWA works great inside the network but it is so slow outside the network that I know something is wrong. How can I identify if it is something in the PIX 501 f...

I have a customer with asa in failover mode; each ASA has an IPS module. My question is how do I configure the IPS in the secondary ASA? or do I?

I have a customer where after the 4.8.02 VPN client came out, it stopped connecting to their Pix 501 running 6.3(5). The local VPN logs show dropped UDP packets. A debug crypto isakmp doesn't even report an attempt to perform a phase 1 key exchange. ...

I would like to know which is equivalent model having same or equivalen specification in cisco against SSG140 8port firewall(juniper nework).Kindly let me know and suggest about the same.

Hi, I just bought an ASA 5505 (ASA5505-BUN-K9)I can only have 10 Inside hosts if I do a "show version" and the DMZ's are MAX 3, DMZ Restricted...Now I want to have unlimited Inside hosts and I know I have to buy this licence:ASA5505-SW-10-ULNow does ...

I have a question about performing URL redirection with WebVPN. Basically, is there a way to do this? We use ASA for IPSec VPN, and Microsoft ISA to allow access to webmail and some other internal HTTP resources without a client. I am trying to cook ...

Hello All Any idea what can be causing tunnel interface output drops? All my p-2-p tunnels are reporting output drops.My remote sites each contain three T1's (PPP Multilink setup) My serial interface;s are not reporting output drops, my Multilink int...

Hi,I've been asked by our customer to enable the IOS FW feature on our DMVPN which has approx 50 remote sites running off 2 x dual 3845 Hub routers.For commercial reasons I can only configure the IOS FW feature on the 3845 Hubs - i.e. not on the remo...

We have 2 people who need to communicate via VPN connections on their Cisco softphone. The call will connect, but no voice traffic is passed. Is there a setting on the ASA we need to set, or a rule that needs to be applied? They are able to call to p...

Hi,I have a couple of l2l vpns running to other 515e's. When i look in the monitoring section of the ASDM it shows Idle Time Out: 30 minutesIn the Ipsec section. I can't find a value for this in the CLI, does anyone know if its configurable?regardsJ ...

my pix failed and this is what I haveUse BREAK or ESC to interrupt flash boot.Use SPACE to begin flash boot immediately.Reading 1962496 bytes of image from flash.imgsum_config: sumval(0x3e9f) md5(0x96a6bc99 0xfdcbe539 0x38a4f658 0x28d53468)imgsum_ver...

Hello,I have 2800 Series Router where currently 3 VPN peers are terminated [ site to site vpn ] Currently my ISP bandwidth is 3Mbps. Using MRTG I can know the utilzed Internet bandwidth, but how could I know the utilized bandwidth for each VPN-peer.P...

Hi, I am untrained in Cisco but 20 year IT experience with some Unix, Linux, Windows mix. I am setting up a 506E VPN to allow users with Cisco VPN client software to connect. I have gone through a couple of training videos and I'm looking for some ex...

I recently turned the Firewall Feature set on for one of our remote sites that previously had only PAT for security. We are seeing about 1600 attempts an hour to access the PAT address on TCP and UDP port 15687. Anyone have any idea what is going on?...