Network Security

Hi All,my scenario is as shown below :R1>>ASA1>>internet>>ASA2>>R2i have established the ipsec tunnel between the two ASA's. now, when i run ospf on both these ASA's ,they do not become neighbors. as per the cisco doc ASA allows OSPF unicast to work ...

I have a PIX, I want PCs from outside interface to access a server(1.1.1.1) inside. I know I can use static (outside,inside) 1.1.1.1 1.1.1.1 and a ACL to allow.My question is: can I use NONAT + ACL to do it ?Thanks

Hope anyone of you could help ..i would like to know the max. no. of security policies or ACL and no. of object that the ASA 5510 could support .. i think it might be memory dependent .. but if the no. of acl increase, the throughput would decrease o...

Hi, I would like to know what kind of performance problems could I have if I configure two ASAs 5520 doing Active/Standby Failover using the same LAN interface for the failover link/stateful llink.That?s because I need to use two outside interfaces.

Here is what I am trying to accomplish using an ASA 5540/Steel-Belted Radius/Active Directory. When a user connects via SSL they are able to select a group from the drop-down list on the login page.Unfortunately as long as they have a valid active di...

Problem: We try to configure Initial Sequence Number (ISN) Randomization but we see varying information on CCO websites about its operation. . Details: "I'm trying to determine the a...

Everytime I enable loggin with my PIX 515E and arandom amount of time passes it will completely close down all access through the device. Any help would be appreciated. I am running ver. 7.0(1) and I have attached a copy of my config. for all to che...

HI,Iam trying to establish VPN tunnel between a Linux based firewall and vpn concentrator 3030 can somebody help me out in this.public port is connected logically to DMZ zone and is natted to public ip.the private port is connected to the inside netw...

Hi ppl!I have a unstable PIX, running 7.2.2 - with a public Verisign cert on it.Now I need to restore this PIX's conf onto a new PIX hardware, but when pasting the conf in, the part with the Verisign Cert is failing. This is probably due to the self-...

Dear All,I need to setup the vpn tunnel between 2 sites.One site has the concentrator another site has the pix 515E.The site engineer from the concentrator side given the below details to configure the pix in my site.Concentrator site Tunel ip : 168....

Hi,I am facing this scenario.Mail Server on LAN (behind ASA5510) is Pri.IP.Add.1 with SMTP on port 25.This is to be NATed to Pub.IP.Add.1 from ISP 1 on port 25.Also to be NATed to Pub.IP.Add.2 from ISP 2 on port 26 (with port forwarding).Can anybody ...