Network Security

Hi.We have a very interesting problem. Using KIWI as a syslog server, we are trying to record each and every time a user logs into a pix or asa device and ALSO every command entered. Is this possible via programming on the security device OR MUST it ...

Hello,since Cisco has been telling us that AnyConnect is the upgrade path from the old IPsec client for x64 machines, I am wondering if you require WebVPN licences to use the AnyConnect client. ASDM reports the number of "clientless SSL VPN" peers, s...

How do I block outbound traffic?

Hi,Ive been having issues when creating subinterfaces with vlan id's on the 5550.The port connecting to the ASA5550 is a trunked port and has the same vlan id as the sub-int on the 5550 and is allowed to trunk the vlan. When this is configured you ar...

what is the difference between L2 & L3 NAC?

Hi everbody,I need your help! I have Server 2003 Domain Controller running Exchange and OWA. Sending and Receiving Email no problem. when I want to access OWA from outside that doesnt work. If I change the settings OWA works but clients(inside) canno...

I was able to get a web server that we have on our DMZ to communicate with my SQL server but I wanted to know if anyone knew why I needed to use gt 1024 in my access statement.I orginialy tried to useaccess-list DMZ extended permit tcp host 192.168.1...

Is it possible when creating an exception with the Rule Wizard to not have it create a new rule module every time a rule is created. I would like to just add rules to an Exceptions policy that is applied to the group with out it creating a new rule m...

I am trying to block AOL internet radio. with a sniffer tool, it shows that the outside ip's are still being accessed. Also, when i do a show access-list it does not show anything on the hitcounts.access listaccess-list dmz-2_in; 7 elementsaccess-lis...

I have figured it out, thanks.

HiI have tried to set up access from a Web Server in a Web DMZ to a SQL Server sitting in a SQL DMZ. Initially I thought that all I need to do was setup a static from teh web server say static (inside, outside) 1.1.1.1 1.1.1.1 0 0 and the set an ACE ...

Hi,Has anyone tried configuring ASA 5505 for two ISPs for redundancy? Any issues that came up? Did the fail-over work?Thank you.Regards,Alex

I tried creating a privilege 0 account for a client for read-only access to their ASA firewalls. For the CLI login, it won't matter cause they don't know the enable password, so that keeps them from making changes. But for the ASDM login, I was able ...