Network Security

Hi,I've been asked by our customer to enable the IOS FW feature on our DMVPN which has approx 50 remote sites running off 2 x dual 3845 Hub routers.For commercial reasons I can only configure the IOS FW feature on the 3845 Hubs - i.e. not on the remo...

We have 2 people who need to communicate via VPN connections on their Cisco softphone. The call will connect, but no voice traffic is passed. Is there a setting on the ASA we need to set, or a rule that needs to be applied? They are able to call to p...

Hi,I have a couple of l2l vpns running to other 515e's. When i look in the monitoring section of the ASDM it shows Idle Time Out: 30 minutesIn the Ipsec section. I can't find a value for this in the CLI, does anyone know if its configurable?regardsJ ...

my pix failed and this is what I haveUse BREAK or ESC to interrupt flash boot.Use SPACE to begin flash boot immediately.Reading 1962496 bytes of image from flash.imgsum_config: sumval(0x3e9f) md5(0x96a6bc99 0xfdcbe539 0x38a4f658 0x28d53468)imgsum_ver...

Hello,I have 2800 Series Router where currently 3 VPN peers are terminated [ site to site vpn ] Currently my ISP bandwidth is 3Mbps. Using MRTG I can know the utilzed Internet bandwidth, but how could I know the utilized bandwidth for each VPN-peer.P...

Hi, I am untrained in Cisco but 20 year IT experience with some Unix, Linux, Windows mix. I am setting up a 506E VPN to allow users with Cisco VPN client software to connect. I have gone through a couple of training videos and I'm looking for some ex...

I recently turned the Firewall Feature set on for one of our remote sites that previously had only PAT for security. We are seeing about 1600 attempts an hour to access the PAT address on TCP and UDP port 15687. Anyone have any idea what is going on?...

I want to change up the current config of my 4215 to use two ports for a IPS inline pair pass thru setup. If you have come across the documentation on this I would appreciate if could you link the relevant documentation to your reply. I currently hav...

Hello,We recently bought a Cisco Pix 506E firewall app. for our (small sized) network. The specs state that the pix 506 is capable of using a DMZ interface, however there are only two physical interfaces. I figure that for a DMZ i have to configure a...

Hi,I have the Following scenario, The source on the DMZ will be accessing the Server at Inside. when ever It downs, the same traffic has to reach the another Server with the same IP which is on the Inside as well. Is it Possible to route the traffic ...

Hi,I am facing a peculiar NAT situation on a Pix with multiple interfaces, config below-nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 dmz1 security10nameif ethernet3 dmz2 security40nat (inside) 1 10.0.1.0 255.2...

hi all i am trying to setup asa failover using the management interface.asa1int e0/0nameif insideip add 10.1.1.1 255.255.255.0 standy 10.1.1.2no shint e0/1nameif outsideip add 1.1.1.1 255.255.255.0 standy 1.1.1.2no shint m0/0no shno management-onlyin...

Hello.I have two FWSMs, running in Failover Active/Standby mode. I would like to run OSPF on one of the FWSM's interface (int vlan2). I have two questions regarding that:1) Will both FWSMs participate in the OSPF, even when the Primary is working ? I...

Hi,I need advice for hardware selection.Which hardware-model would you recommend with proper failover considering the following<> Business is 24X7X4 [ International 10 sites ]<> SAP Application accessibility and Lotus Notes replication is a big facto...

Hello All,When a remote user connects via the VPN client, they experience a disconnection a few seconds after they have authenticated successfully.I checked the ASA logs and notice the following msg:%ASA-4-402123: CRYPTO: The ASA hardware accelerator...