Network Security

Helloi have a set up with a Cisco ASA 5520 with remote access VPN (using Cisco VPN client) and 3 different VPN group policies, each with different levels of access. the Users are authenticated using RADIUS against a Windows server 2003 Active Directo...

I have an ASA5505 with one site-to-site vpn policy to subnet "A", subnet "B" is the local subnet behind the ASA5505. I have a remote-access policy set which allows vpn client to remotely connect to the ASA5505. My desire is to allow the remote users ...

Does the PIX reset the QoS DSCP values in the IP packets through it?

Hi,Can anyone told me, how can I autmatically download the IPS 6.x Sig an SP update-s, if I didn't use CSM?Is there any solution?ThxTamas

Cisco released S284 and S285 this week, but for IOS IPS in Mainline and T-Train Releases prior to 12.4(11)T, there are no updates on CCO. Has signature update support for prior to 12.4(11)T stopped? Did I miss an End of Life notice? If not, how long ...

HiI have pix 535 with failover os 7.0.When I am connect the firewall to network some of days it changes Active to passive. now last two days primary router auto reboot. when Primary router reboot then time failover ruter active and after some of hour...

Just got a new ASA 5510 and I am having a hard time letting any trafic through. I can ping the outside interface xxx.xxx.xxx.xxx but none of the ports are open.Ethernet0/0 outside xxx.xxx.xxx.xxxEthernet0/1 inside 10.10.10.10The nic on my iis server...

Hi, Kindly Indicate for below scenario, Static necessary or not for Inbound Conncetion If I need to hide my Internal IP Address to Outisde Users.I am not able to access my Inside Server. nameif ethernet0 outside security0 nameif ethernet1 inside secu...

I have got 2 no's of asa 5520 one gest hanged in around 40 minutes and the other does not boot up, the LED for the poser does not come up, led for the flash is amber and the, vpn amber pleas let me know what could be the problem.thanks

Hi,If I have interfaces which are up but were left with no IP addresses; is there any risk for L2 attacks here if somebody got physically connected to any of them?Regards,Haitham

I have a PIX 525 that connects to a 6508 switch. The switch port is configured to auto and the PIX is 100 full. I trying to connect packet filter box in between. If I change the port configuration on the 6509 to 100 full, traffic drops. If I put it b...

Hi,I am reviewing the PIX config of my client who is configuring deny ip any any ACL on the failover interface between the 2 failover units!! I was confused of this configuration and just would like to check if this will deny the stateful information...

How do you troubleshoot drop packets on the asa. What could be the cause?ciscoasa# show interface insideInterface GigabitEthernet0/0.100 "inside", is up, line protocol is up VLAN identifier 100 MAC address 0018.73d6.eb96, MTU 1500 ...

I am using Cisco VPN client to connect our one remote office.Unfortunately the IP pool range defined in remote office is same like my local LAN I mean my LAN is 192.168.1.x and VPN client IP also 192.168.1.x. After connection I can connect remote off...

crypto identity - this command does not work in any configuration.who has an example that was fully tested - the TAC example does not work and is the opposite of the command reference. the syntax is not clear, rarely the IOS accepts the DN with comma...