Network Security

HiIn Pix 7.0 vpn configuration and when I place show crypto isakmp sa then any output comein QM_ideal state.so what is QM_ideal State ??Thanks

We have a Network on MPLS backbone with dual service provider.There are 50 spoke location.DC and DR locationTopology is hub and spoke with all sites accessing data hosted at primary DC.ALso in case of disaster all the spoke sites will connect to DR s...

I just got a asa5520 to replace my current firewall. I am having problems getting it even to work .I can 't get any traffic to pass through outbound or inbound even with the basic configs....am I missing something with this device??

I'm trying to set up a LAN-2-LAN VPN connection between two VPN 3000 concentrators...the problem is one of the sides has a dynamic IP. Is there a way to get it setup with one side using static IP and the other side using Dynamic?Thanks

Hi all,I am facing a problem trying to establish a tunnel with one of our supplier.Their side is terminated on a IOS router currently unknown type and version (should be 12.2 - 12.4), my side is an ASA 7.2(2), configurations are attached (at least th...

Hi,I'm not even sure how to title this conversation, but here goes. We have a hub and spoke VPN setup with a 515E as the headend. There are PIX 501s at the remote locations. I have several remote site connecting to the PIX server, but not to each ...

I just bought an ASA 5505 to use at home. I'm replacing an old Linksys Cable/DSL router. I'm having some trouble configuring it to forward DNS queries from internal machines to the DNS server at the ISP. The ASA's outside interface is connected to...

Occasionally, the users are able to establish connection without problems however more often then not they run into issues when attempting to access resources on the network. The tunnel is established but when they attempt to check e-mail, browser a...

Hi In the pix ver 7.0, what is difference logging history debugging from logging history warning for MRTG monitoring pix?(logging history debugging makes pix cpu higher 20% than warning)Thanksben

I've been told that when you implement Cisco NAC and are using non-Cisco IP phones, the device will authenticate the phone but not the pc plugged into it. Is this true or was it true and if so, is there a fix or a workaround? Nortel has been using th...

We are currently running CSA ver. 5.1.0.79.We see the message: "The process 'C:\WINDOWS\System32\svchost.exe' (as user NT AUTHORITY\SYSTEM) attempted to accept a connection as a server on UDP port 123 from (Internal IP Address) The operation was deni...

Hi friends, I was wondering if any one of you have faced simillar problem that I am facing. I have 2 FWSM's 3.1(5), in two seperate 6509's running native IOS 12.2(18)SXF7. I have created 2 groups with one active on each switch. Problem is they are al...

Hi, How do I setup the FWSM so that wireless phone traffic will pass through to CM and other IP phones? My setup is: ? Running a transparent context.? WLC ssid tied to outside vlan. ? CM and other phones on inside. ? Outside set to 0 ? Inside set to ...

Hi All,Wondering if anyone else here has seen this. I have a PIX 515E UR that died last week. When I say died, I mean that it powers on, but I can't connect to it with console or ethernet cables.The weird part: The power LED does NOT come on, but ...

Hi,I've never configured a PIX506E without NAT but I'm planning on doing it for one of my customers (their PBX/VOiP server requires a no-Nat connection). They're going to have a T1 router route the addresses to the PIX, the PIX will have public addr...