Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Bit of a head scratch..I have 4 remote sites all connected in a full mesh. all sites terminate on a ASA and I am setting up IPSEC vpn tunnels between all for security. Now my question any idea how to handle when one link goes down to now send the tra...
I configure my ASA 5520 using the command line, but I keep an https:// session open so I can use the packet tracer in order to perform virtual tests. Great.So I check to see if my configuration will pass a simple http request from inside to outside ...
I have a Cisco 3005 Concentrator with a public and private IP addres. Private IP address is 172.22.0.3 . Backbone switch Cisco 4506 is 172.22.0.5 255.255.0.0 Client connect to VPN via IPSEC using Radius-Auth with expry to IAS server inside the net...
hello,suppose there is one host who is accessing two different servers in the network.when host A access to host B all we have to do is make sure that it gets to talk to it one to one thus i configure thisstatic (inside,outside) tcp 60.x.x.72 3392 20...
Can you have multiple subnets on the outside of a Pix 515E with 6.3(3)? I have run out of addresses and adding a subnet would take much less configuration changes. I have a 2801 router with a T1 card with the Pix 515E behind it. If I just set up t...
Hi,Can anybody confirm whether it is possible to assign Users to specific Vlans based on Active Directory attributes.Cisco NAC 3100 Series devices will be deployed in the installation. At present no posture assessment is necessary, only Vlan assigmen...
i have downgrade the ios version on pix 525 from 7.2(1) to ios version 6.3(2),but now i have found problem with the failover unit that is when i configure the failover for redundency it shows the message that there is no license for failover,plz guid...
Has anyone had problems getting the S283 Signature on the 5.1-5 version to load correctly with the upgraded 3.1 CSM? I got the S282 signature to upload but no luck on the S283
I just recently changed the IP pool for my VPN clients from class B to a class C.I assinged 192.168.1.1-253 for the range.I have a VPN client who is wireless and his netgear assigns him 192.168.1.2. He can validate on the VPN but cannot resolve name...
I'm getting some alarms for signatures that I think are a bit too sensitive -- 3051, for example. It makes sense to me to adjust the Minhits or AlarmInterval to make the signature less sensitive, increasing the level of activity before an alarm occc...
Ok, I am trying to have an FTP server (eFTP if it matters) in my web dmz. Basically have the server with a private performing NAT to a public address, no big deal, I have enabled the appropriate port for forwarding (21) - and I can set what other po...
Hi all, Could you please tell me if I can log url pages visited in inbound and outbound connection through Cisco Asa?I tried with logging trap debugging but i see only layer3/4 information.Thanks!Marco
