Network Security

Hello everybody,I have a remote 871 (see attached config) connecting to a head end 3030 doing ezvpn-network extension mode to corporate. I would like the remote to be able to access a couple of servers on the provider's network on 172.30.1.0/24 outs...

I have a fail-over pair. I can get ssh/https into the primary but not the secondary. I can only get into secondary after taking primary off-line. There's no VPN on the box. Could someone please give me some hints why I can't get to the secondary?

I am aware how CBAC does work , please look at the figure below (step 2) :http://img484.imageshack.us/img484/7679/cabcib1.jpgIn step 2, he says: " CBAC creates a dynamic ACL allowing return traffic back through the firewall "Does he mean by: " CBAC c...

One of the rackmount brackets that comes with the ASA5500 series has a forward facing plate that sticks out beyond the front of the ASA. I have guessed that this is to take the second cable management arm, but this seems rather useless. What exactly ...

Hello,i have some problem with NAC ASA and CTA work.Try to configure ASA to work with NAC.Conditions:VPN is connected and work fine (ping from local comp. to inside network via VPN)CTA is installed and property work with wired 3750 (in NAC-L2-IP NAC-...

Hello everyone,I am setting up a PIX515 FO. It is currently on the 6.3(5) software. My UR PIX is running 7.1(1)I want to upgrade my FO to the same version, but the upgrade sheet says it requires 128MB RAM to do so; it currently has 64MB. Can I upg...

Hi We are using pix 525 with ver 7.0 now, cpu usage is about average 30%, sometime go up over 50%. If use ASA 5520 replace pix 525, how about for cpu usage improve?Thanksben

customers like IBM have an all in one appliance ,that can hold firewall , vpn,antix and IPS at the same time , while cisco have ASA that do have firewall ,vpn but its either IPS or antix.what can i do if customer needs all the above feature ?does thi...

if i have a layer 3 switch and an IPS where i wanted to opreate on ips INLINE mode bet each of the 3 vlans, how this will be achieve?thanks

What is the syntax to turn on date and timestamp for logging console on this vers of code for a 506e? I have logging on, logging timestamp, logging buff debugg, date and time are correct...can't seem to get timestamp on the log enties.

My suggestion for session key encryption for a lan based failover connection for the PIX is as follows:A) Physically connect PIX interfaces to a workgroup amd or enterprise Catalyst 6509 switch, IOS 12.2(18) SXF and higher.B) Assign static IP address...

i have been working on this for over a week with no luck - if i configure the web server in my dmz to listen on port 5000 i can forward requests coming from outside on port 5000 and everything works fine. if i configure the web server to listen on po...

I'm getting the following error in my PIX:189: PPTP set-link-info: (inside:192.168.1.50/1291 <- outside:3.3.3.3/1723)190: ERROR: PPTP fail to untranslate CID <40722>What does this exactly mean? I tried looking everywhere regarding this but I can...

1.can SUP32 be used to get 700Gbps backplane architecture?2.can SUP32 have 400mpps IPv4 performance without upgradin to SUP 720?3.what is distributed hardware feature card?thanks in advance