Network Security

I have a customer where after the 4.8.02 VPN client came out, it stopped connecting to their Pix 501 running 6.3(5). The local VPN logs show dropped UDP packets. A debug crypto isakmp doesn't even report an attempt to perform a phase 1 key exchange. ...

I would like to know which is equivalent model having same or equivalen specification in cisco against SSG140 8port firewall(juniper nework).Kindly let me know and suggest about the same.

Hi, I just bought an ASA 5505 (ASA5505-BUN-K9)I can only have 10 Inside hosts if I do a "show version" and the DMZ's are MAX 3, DMZ Restricted...Now I want to have unlimited Inside hosts and I know I have to buy this licence:ASA5505-SW-10-ULNow does ...

I have a question about performing URL redirection with WebVPN. Basically, is there a way to do this? We use ASA for IPSec VPN, and Microsoft ISA to allow access to webmail and some other internal HTTP resources without a client. I am trying to cook ...

Hello All Any idea what can be causing tunnel interface output drops? All my p-2-p tunnels are reporting output drops.My remote sites each contain three T1's (PPP Multilink setup) My serial interface;s are not reporting output drops, my Multilink int...

Hi,I've been asked by our customer to enable the IOS FW feature on our DMVPN which has approx 50 remote sites running off 2 x dual 3845 Hub routers.For commercial reasons I can only configure the IOS FW feature on the 3845 Hubs - i.e. not on the remo...

We have 2 people who need to communicate via VPN connections on their Cisco softphone. The call will connect, but no voice traffic is passed. Is there a setting on the ASA we need to set, or a rule that needs to be applied? They are able to call to p...

Hi,I have a couple of l2l vpns running to other 515e's. When i look in the monitoring section of the ASDM it shows Idle Time Out: 30 minutesIn the Ipsec section. I can't find a value for this in the CLI, does anyone know if its configurable?regardsJ ...

my pix failed and this is what I haveUse BREAK or ESC to interrupt flash boot.Use SPACE to begin flash boot immediately.Reading 1962496 bytes of image from flash.imgsum_config: sumval(0x3e9f) md5(0x96a6bc99 0xfdcbe539 0x38a4f658 0x28d53468)imgsum_ver...

Hello,I have 2800 Series Router where currently 3 VPN peers are terminated [ site to site vpn ] Currently my ISP bandwidth is 3Mbps. Using MRTG I can know the utilzed Internet bandwidth, but how could I know the utilized bandwidth for each VPN-peer.P...

Hi, I am untrained in Cisco but 20 year IT experience with some Unix, Linux, Windows mix. I am setting up a 506E VPN to allow users with Cisco VPN client software to connect. I have gone through a couple of training videos and I'm looking for some ex...

I recently turned the Firewall Feature set on for one of our remote sites that previously had only PAT for security. We are seeing about 1600 attempts an hour to access the PAT address on TCP and UDP port 15687. Anyone have any idea what is going on?...

I want to change up the current config of my 4215 to use two ports for a IPS inline pair pass thru setup. If you have come across the documentation on this I would appreciate if could you link the relevant documentation to your reply. I currently hav...

Hello,We recently bought a Cisco Pix 506E firewall app. for our (small sized) network. The specs state that the pix 506 is capable of using a DMZ interface, however there are only two physical interfaces. I figure that for a DMZ i have to configure a...

Hi,I have the Following scenario, The source on the DMZ will be accessing the Server at Inside. when ever It downs, the same traffic has to reach the another Server with the same IP which is on the Inside as well. Is it Possible to route the traffic ...