Network Security

I am using a route-map to change the ip-next hop of some traffic at (cisco 4000 router). I try to configure the same route map on ASA 5520 but the command "set ip next-hop" not accepted. Is there any alternative solution.

HI All, we have just bought two Cisco ASA's that I have setup in a failover pair, Having some issues with the Access Lists however.I have created an access-list that permits any source to access a web server on the DMZ (Using NAT) However when I brow...

Hi,Is NAC supported on the Catalyst 6500s with Sup2/MSFC2?Thanks,MRD

i have an ASA 5500 firewall and i need to ping from hosts in inside interface to outside interface

We are experiencing an issue where once or twice a month our DSL connection takes a hit, and then the ASA5505 device will not function. In the past the only way to resolve this has been to shut the device down and then bring it back up about 10 minu...

Does the below config allow (just from a NAT perspective)hosts on the 10.1.1.0 subnet to access servers on the 192.168.1.0 subnet?It this NATing the FTP interface to the 10.1.1.10 address?if so, would this over rule any access-list that was applied i...

Hi folks.I'm doing an WebVPN pilot on one of our ASA's (running 7.2.2). Everything is working fine, but I've been asked to restrict access to users that are members of a certain Active Directory group (lets call the group "VPNTEST")Right now the ASA...

We have ASA 5510 with standard port use: Inside, DMZ and outside(T1). Leaving Eth0/3 unused. We are considering getting DSL for a redundant Internet connection, could we use Eth 0/3 somehow for failover?Or is this better suited for a different device...

With CSM 3.0 I was able to administer global tuning by logging into CSM, choosing Management Center, Configuration, Global and I could begin.In 3.1 where Management Center used to be I now have Auto Update Server. Of course Auto Update Server doesn'...

Hi,I have one question regarding signatures update, are the Cisco new signatures include the new updates plus the old ones or just the difference between the latest update and the previous one?If I have an IPS which has never been updated for a year ...

Hello everybody,I have a remote 871 (see attached config) connecting to a head end 3030 doing ezvpn-network extension mode to corporate. I would like the remote to be able to access a couple of servers on the provider's network on 172.30.1.0/24 outs...

I have a fail-over pair. I can get ssh/https into the primary but not the secondary. I can only get into secondary after taking primary off-line. There's no VPN on the box. Could someone please give me some hints why I can't get to the secondary?