Network Security

On NAC configuration (1751 router )i try to bypass IP Phone configuring ip phone identification with :identity profile eapoudpdevice authorize type cisco ip phone policy ip_phoneidentity policy ip_phoneaccess-group nac_ip_phone_acleou allow clientl...

I have a question about natting on the FWSM. We want to move a few servers to an outside VLAN but we also want to still be able to hit them using the old inside IP's. Here's the basic set up:interface Vlan80 nameif outside security-level 50 ip add...

We have installed a 4150 SX Cisco Intrusion Prevention System, Version 5.1(2)S240.0 sensor using vlan pairs.The problem that we are experiencing is that when the Cisco vpn client is installed on Microsoft Vista, the IPS causes the IPSec tunnel to be ...

Retiring subnet 172.16.24.x 255.255.252.0 in phases, moving devices to 172.17.24.0 255.255.252.0. Current phase - move Messaging server devices. Senior stating that currently proposed command set for move does not make sense in terms of subnet mask...

I would like to access a dmz server with both public and private ip's from the inside. I can access private with static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.255and I can access by public with destination NAT static (dmz,inside) 64...

We bought a new PIX with 7.2(2),We are having issues configuring the IP address and telnet to the PIX from inside network.On the running configuration it shows ip address for the interface but the "show interface" shows "ip address unassigned".Please...

We have a mac filter on a port of a Cisco 3560. That port connects to the uplink port of a 4-port unmanaged switch. It works great.Today, a different 4-port switch was connected. I would expect that no traffic would pass since the mac address is w...

I have a Pix 501 that is connected on the e0 interface to a Cisco 2950 switch. Been having some problems getting out with it from the internal network and when I do a show interface command on e0 it shows interface is up, line protocol is down. I'v...

I have a 3015 Concentrator and I am wondering how I will know when it exceeds its limts for bandwidth encryption and throughput to justify upgrading to a 3030 or SEP modules.

When I do a static NAT on the Pix:-static (inside,outside) 172.16.1.2 192.168.1.2 netmask 255.255.255.255I can see the inside IP address 192.168.1.2 is translated to 172.16.1.2 on the outside interface using the network sniffer. However if I introduc...

I want to authenticate my ipsec vpn client by using certificate. I am using asa5540 as ipsec vpn server. The first step I should do is create an trustpoint and authenticate it to ca. the trustpoint name is knasacawhen I execute the commandcrypto ca a...

I'm Having problems with RA vpn users authenticating with Vasco tokens on my new ASA 5510 platform. I,m migrating from PIX 6.3.4 to the ASA. In my PIX configuration I used the command:crypto map outside_map client token authentication ABCXYZ to let v...

Hi !I just have a couple of url to block, so I don't really want to implement a server like websense or N2H2 to manage the web content I want to block. Is there a way in the ASA-5505 to deny access to certain web pages with the url of the page ?