Network Security

We are about to migrate our current ISPs to AT&T, the draw back is the ATT is providing the Edge router as well as managing it. Right now I have two OSPF processies in my PIX , one OSPF process for the outside interface and a different OSPF process f...

I am using NAC as In-Band mode on v4.0.5. Whenever I add a new vlan on it, existing users don't get IP addresses from DHCP server which is on trusted network with ip helper-address, unless I delete current vlan mappings and add them back. Any idea?

Hi there. Is there anyway to get a hold of newer software than the 6.1 with my normal private lowlevel account here? Also i'd like the newer version of PDm, as i am running the 1.1 versionThax

Hi Guys,I had IPS 4215 upgraded to K9-6.0-2-E1 from CLI.The problem is the IPS added to VMS 2.2 and now I couldn't administrate and manage the IPS from the VMS.Any useful comments..Regargs,

Hi All,my scenario is as shown below :R1>>ASA1>>internet>>ASA2>>R2i have established the ipsec tunnel between the two ASA's. now, when i run ospf on both these ASA's ,they do not become neighbors. as per the cisco doc ASA allows OSPF unicast to work ...

I have a PIX, I want PCs from outside interface to access a server(1.1.1.1) inside. I know I can use static (outside,inside) 1.1.1.1 1.1.1.1 and a ACL to allow.My question is: can I use NONAT + ACL to do it ?Thanks

Hope anyone of you could help ..i would like to know the max. no. of security policies or ACL and no. of object that the ASA 5510 could support .. i think it might be memory dependent .. but if the no. of acl increase, the throughput would decrease o...

Hi, I would like to know what kind of performance problems could I have if I configure two ASAs 5520 doing Active/Standby Failover using the same LAN interface for the failover link/stateful llink.That?s because I need to use two outside interfaces.

Here is what I am trying to accomplish using an ASA 5540/Steel-Belted Radius/Active Directory. When a user connects via SSL they are able to select a group from the drop-down list on the login page.Unfortunately as long as they have a valid active di...

Problem: We try to configure Initial Sequence Number (ISN) Randomization but we see varying information on CCO websites about its operation. . Details: "I'm trying to determine the answer to the question: Do Cisco ASAs randomise TCP Sequence Numbers ...

Everytime I enable loggin with my PIX 515E and arandom amount of time passes it will completely close down all access through the device. Any help would be appreciated. I am running ver. 7.0(1) and I have attached a copy of my config. for all to chec...

HI,Iam trying to establish VPN tunnel between a Linux based firewall and vpn concentrator 3030 can somebody help me out in this.public port is connected logically to DMZ zone and is natted to public ip.the private port is connected to the inside netw...