Network Security

Hi,I would like to terminate my remote access VPN on a PIX 525 software 6.3(4).Can I use the following command to enable local user authentication:crypto map my-map client authentication localI do not have a AAA server in the environment.(this is a d...

Hi, to everyone I want to ask if there is a method or documentation to guide me throught to give restricted mac or macs to a port via snmp. What are the OIDs and method? Any information would be helpful. Thanks in advance.

I'm having traffic performance issues on a PIX 515e, where traffic from inside to DMZ is considerably slower than traffice from DMZ to inside. Currently there is no filtering between the two interfaces (both set at 100). The only errors I could see w...

I recently start to work in a company as System Administrator. I has a Pix 515E. Trying to access the Pix using PDM I receive this error or screen in my browser "The Cisco PIX Device Manager has started in another browser window. If you wish, you may...

Hi, I wish to initiate NAC implementation on our network.I need to present a simplified overview of what nac is and what devices we can use.Can someone help identify as to how NAC can be implemented and what devices and softwares can be used. Any exa...

I want to redirect all inside to outside http requests (except the proxy server) to be sent to a internal web server which will state that the proxy is not setup and to contact IS. We have a PIX 525 firewall which I would like to put the redirection...

Hi,I am purchasing 2 new ASA 5520 and wish for the to act as a failover pair in Active/Stanby mode. How many physical interfaces do I need in order to allow this to happen. Please note that the failover should be stateful!I don't think that I can p...

We currently have an IDS4215 that has been upgraded to IPS 6.0, i can access the device via ssh but whenever i try to fire up the GUI i get an error loading java applet failed. and the application just hangs there. what version of java should i use,...

Exactly as it reads.This is the "debug crypto isakmp 15"Mar 28 20:58:54 [IKEv1]: IP = 80.176.83.55, IKE_DECODE RECEIVED Message (msgid=7935b7d0) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 60Mar 28 20:58:54 [IKEv1 DEBUG]: Gro...

Hello. I am trying to build a reflexive acl on a 7206 router (Version 12.3(17)) to help secure email without interruptingany other services, especially ftp. Here is what I have so far: ip access-list extended internal-smtp permit tcp 192.168.x.y a...

Hi.I Have a issue regarding call forward busy, no answer and all.When i forward a call to a hunt group that have cti port configured i loose the call. If in the hunt group i have a physical phone line the forward works fine.Any ideas ?

I am having a strange problem. I have a new web server located in the DMZ off my PIX 515e firewall. I set up the access list and static mappings the same as I have for all of my other web servers in the DMZ. From outside, I can telnet to port 80 on t...