Network Security

All,I have an 2811 router with advanced security IOS, two site-site VPNs are terminated on it. On the public interface I added an ACL which allows IPSec traffic and EIGRP - that's the routing protocol to the neighbor Border router. IPSec tunnels are ...

...never tried easyvpn before...do I still need the interesting traffic ACL on the ASA server side for the LAN subnet on the 501 client inside subnet? The tunnel is always up so I suppose it knows innately how to get to the client 501 side...

Hello,i have here a asa 5505 with unlimited/DMZ Software. I have the Problem, that a have another Router in the Internal Site and i have set a Route to the ASA how route the Packets for the Other Network to the Router. The ASA is the Default GW in th...

I have an ASA5510 that keeps requiring me to do a password recovery ever so often at random. I notice this happens if I attempt to access via secureCRT ssh client and then try and use the gui. I reset password and then can access it. Anyone else seen...

Hi,I have 2 ASA boxes, connected by L2L IPSec tunnel.I have Cisco Security Manager connected on one interface of first ASA. Is it possible to manage by CSM second ASA via L2L IPSec tunnel. If it is possible which IP address can I use for connection...

Hi,I am trying to build one IPSec tunnel where i am using the Multilink interface as a source on my end router.But i am unable to build this tunnel up.Now i have doubt like whether we can build IPSec tunnel on multilink or not?If we can configure the...

We are looking at redesigning our current infrastructure, currently we have a Cisco 3060 concentrator that terminates all client and site-2-site tunnels and all traffic is directed to our corporate dmz interface (firewall) for the next hop. All extra...

Hi,I have a question about PIX 515E....is possible to upgrade IOS for this machine? And what is the lastest version?Thank you.

HiI recently upgraded our FWSM from 2.3 to 3.1Previously if I wanted to make multiple changes to an access list I would edit it offline and then re-upload after using the "no access-list WHATEVER" command to delete the old version.However this comman...

Need to know exactly the requirements of flash and ram for upgrade the PIX 525 to version 6.3(5). As you can see there're 2 different statements: 1)PIX 6.3(5) RELEASE NOTES:http://www.cisco.com/en/US/docs/security/pix/pix63/release/notes/pixrn635.htm...

Has anybody know of someone who has implemented the Cisco IPS in a Healthcare network with PACS traffic. When we put the IPS unit inline with a WAN site that has PACS traffic we are seeing a significant slowdown of the transfer speeds from the remote...

Hello There,it's been 3 yers now that i am working with pix, we recently purchased 2 fwsm to put on our Cat 6513, do you think i can easily configure them,can anyone give me a link for examples etc...many thanks.

When configuring static nat (inside, outside) shouldn't the subnet address usedin the static (inside, outside) command be in the same subnet as the inside or outside interface IP address. One of my customer is saying it doesn't have to be.