Network Security

If you issue the "sh crypto isakmp sa" command, what determines whether the tunnel shows up in the list?For example:When I issue this command, I see some as QM_IDLE and MM_NO_STATE,But I have one tunnel that just gets dropped from the list.Does this ...

Netconfig configured with a Task to deploy Access-list config out to Routers and Switches to 190 devices returns a fail to 35 of the 190 devices. The Failure message is detailed below. Applying the config manually to the device works.Failure message ...

Hi all,i have a problem to initially discover my inventory. I always get a error message "device unreachable" within device inventory. When i select is says "can`t resolve name. How can is fix this problem. Which are the solaris files for DNS resolut...

HiWhen I enable same-security-traffic permit intra-interface in pix then under two answer is correct ??[same-security-traffic permit intra-interface"configuration command was issued. What are two purposes of this command?a.It allows all of the VPN sp...

Hi allWe have a vpn site-to-site with our partner company, we are the vpn client and they are the vpn server because we have 4 pcs that have been configured through our ASA 5505 firewall so that the 4 pcs can access to our partner company remotely. O...

i have a remote branch connected to my head office in the following manner:BR-LAN----BR-Router===VPN===HO-Router----HO-ASA----HO-LANi am using the c:\iperf -s on a server at the Head Office and c:\iperf -c (ServerIP) on a machine at the Branch.nothin...

I have a Multicast source behind Cisco ASA -firewall- connected to the internet. A client also sitting behind a Cisco ASA -firewall- wants to receive multicast traffic.How do I configure the ASA to forward Multicast traffic?Links on where I can find...

We currently have two 256MB memory DIMM's. Can we upgrade to two 512MB memory DIMM's? We are having a lot of difficulty with upgrades. Our AIP modules are fine and upgrades spike the memory up to 850MB but always settle at 640MB at a stable rest...

Hi AllI'm new to Pix firwall, I'm facing a problem to get from outside network using dailin RAS to a translated IP address for an SQL server, I can ping RAS ethernet and firewall outside interface but not the translated IP address, I was able to ping...

I have been implimenting a CS-MARS 50 and have it upgraded to 4.2.5. After the upgrade I started receiving the following error:Inactive CS-MARS reporting deviceWhen I pull up the incident, it lists 100 devices, about 25% of the devices I have confi...

Had a PIX 501 with 10 user lic. Applied 50 user lic. a long time ago. Recently went and downloaded 3DES encryption activation key and system has now reverted to 10 user. Is there anything I can do to get my user lic. back?

Hi All,I am a newbie in PIX!! (now a days its ASA).I am creating IPsec tunnel from PIX with Checkpoint NG R55.I have config ready with me for pix but having one doubt about NAT & NO-NAT. I am configuring NAT tunnel.In PIX I have configured VPN ACL as...