Network Security

I have gone through couple of resources about Network Admission Control (NAC)http://www.cisco.com/en/US/netsol/ns466/netqa0900aecd800fdd6f.htmlhttp://www.ciscopress.com/articles/article.asp?p=662903&seqNum=4&rl=1http://www.consentry.com/products_feat...

Hello,We are currently in the process of replacing our Novell Bordermanager server with an ASA 5510.I am new to this, though I have set up the unit according to the documentation. Dynamic NAT appears to work, however the static NATs i've created do n...

I think I am on the right track but unsure. Again, I am running PIX 506 (only 2 interfaces-stuck with 5.1(2) software) on a small network.Here is what I am trying to achieve:1) Allow unrestricted internet access from the inside interface.2) Allow inc...

When an access-list is not applied to an interface, Cisco ASDM shows the following rule for that interface:'Any' to 'Any less secure network' PermitBut as soon as ANY rule is added, the implicit DENY takes over and no other traffic is allowed.The que...

Does anyone know if there is a published ACL rule limitation for PIX 501, 506, 515 & 525's.

Hello all,I have trouble with a vpn site to site.Architecture is :Internal ---- PixV_7.2(1) ---- internet ----- Pix_V6.3(2) ---- Remote site (london)Connection is ok: Crypto isakmp sa I use sysopt connexion permit-vpn and permit-ipsec, and all the su...

We have PIX with 3 interfaces: two outsides and one inside.Inside int goes down once in every 1-2 month. Both switch and PIX show int was up but couldn't send traffic across.Shut/No Shut and rebooting both devices did not help. But strangely, when pi...

Hi,I'm investigating a HARD AD SSO issue on NAC appliance and checking the doc suggested by Prem (Troubleshooting Windows SSO)I don't understand how I can obtain the output in page 14 (title: Debug Logs from Agent).I've activated the event.log (addin...

Hi, I have a lan-tp-lan vpn between ios router and ASA5500 version 7.2.2. The tunnel ist established and the tunnel policy is specified in tunneling GRE traffic from the inside ip of the router (10.170.38.1) to another router (10.201.116.2) behind of...

Please see attached Word document for the problem. Thanks

I'm currently trying to setup a CS-MARS 4.2.1 to monitor my network devices. I have seen in the configuration guide that it supports cisco swithces and ASA IPS modules, what about a router IPS module? (NM-CIDS)I'am already added the IPS module to MA...

Have 2 PIX535s each at remote sites configured for LAN-based failover. There is a VLAN("abc")designed for failover, but in that same VLAN are servers. My setup is as follows: PIX535 connects to a DMZ switch using 4 connections: the Inside intf & 3 ot...

Does anyone have a reference for understanding how to create Event Action Filters? I had a filter in place to remove the false positives created by my Proxy servers and the rule has disappeared. I still have the $HTTP_PROXY variable just no rule. I c...

Hello:Does anyone have a step by step upgrade procedure for upgrading the PIX from v7.0 to v7.22 ?I have tried the normal upgrade procedure similar to the one available for 6.3 to 7.0, but i get an error saying "Not Enough Space on Device"..even if i...