Network Security

I want to configure active/active on pix 525 having version 7.2. currently these 2 devices are configured without any failover mode. I have 2 ISP, isp1 & isp2 . I want any outbound traffic will go via these 2 isp'2 in a load balancing method. means 1...

Hello guys,Would it be possible to deploy Cisco ASA like Cisco VPN 3000 which connecting only one interface to DMZ interface of the firewall? I?d like to use it for remote access IPSec VPN. I?m looking for any documents regarding this configuration b...

I am using a route-map to change the ip-next hop of some traffic at (cisco 4000 router). I try to configure the same route map on ASA 5520 but the command "set ip next-hop" not accepted. Is there any alternative solution.

HI All, we have just bought two Cisco ASA's that I have setup in a failover pair, Having some issues with the Access Lists however.I have created an access-list that permits any source to access a web server on the DMZ (Using NAT) However when I brow...

Hi,Is NAC supported on the Catalyst 6500s with Sup2/MSFC2?Thanks,MRD

i have an ASA 5500 firewall and i need to ping from hosts in inside interface to outside interface

We are experiencing an issue where once or twice a month our DSL connection takes a hit, and then the ASA5505 device will not function. In the past the only way to resolve this has been to shut the device down and then bring it back up about 10 minu...

Does the below config allow (just from a NAT perspective)hosts on the 10.1.1.0 subnet to access servers on the 192.168.1.0 subnet?It this NATing the FTP interface to the 10.1.1.10 address?if so, would this over rule any access-list that was applied i...

Hi folks.I'm doing an WebVPN pilot on one of our ASA's (running 7.2.2). Everything is working fine, but I've been asked to restrict access to users that are members of a certain Active Directory group (lets call the group "VPNTEST")Right now the ASA...

We have ASA 5510 with standard port use: Inside, DMZ and outside(T1). Leaving Eth0/3 unused. We are considering getting DSL for a redundant Internet connection, could we use Eth 0/3 somehow for failover?Or is this better suited for a different device...

With CSM 3.0 I was able to administer global tuning by logging into CSM, choosing Management Center, Configuration, Global and I could begin.In 3.1 where Management Center used to be I now have Auto Update Server. Of course Auto Update Server doesn'...

Hi,I have one question regarding signatures update, are the Cisco new signatures include the new updates plus the old ones or just the difference between the latest update and the previous one?If I have an IPS which has never been updated for a year ...