Network Security

I'm trying to match crypto maps as a submode so I can verify qos pre-classify is applied. The crypto map names and numbers vary, but will always be ipsec-isakmp. So far, I have tried the following to match the map:crypto map [#.* .*#] ipsec-isakmpcry...

IS there a clean upgrade of the client from 4.0.3 to 4.5? Does the v 4.0.3 client need to be uninstalled before 4.5 is installed? Same question for 4.5 to 5.0? How evasive are these client upgrades?Thanks,CB

Is there a similar command for ASA like "isakmp log #" in a pix? Also, from what I have read about dpd in asa, you can specify the idle value in seconds, which specifies how long tunnel can be idle before dpd starts, as well as a retry value in secon...

Hi Folks,which is best to use on PIX. PDM or CLI.does PDM provides all options that CLI provides?Thanks & reg.Yogi

I am pinging the inside interface of the pix 515-E, it pings but drops the occasional ping, and experiences packet loss, because of this, the secondary pix tries to kick in and causes further issues. There are no bandwith intensive applications in us...

I have 2 sites, bith which have full 10MB connections to the internet. I am trying to configure a IPSEC VPN link to allow usage of the full bandwidth if required (for backup, files transfer). On one side I have a PIX515E and on the other I have a PIX...

Hi,I'm using an ASA5510. I want enable VPN-Client Access, but there is always the Message: "Deny ip Spoof from (..) on Interface outside". I'm also not able to ping this device. ACL's are open and the command:icmp permit any unreachable outsideicmp p...

I am setting up an ASA5505 for a pilot home office, defining a business vlan and a personal vlan. I have setup the dhcp scopes for both vlans, but I need to be able to only permit specific mac-addresses to receive a DHCP address from the business vla...

Will CiscoSecure ACS 3.0.4 run on Windows 2003 Server?I recogize the product is EOL and unsupported.thanks in advanceAjaz NawazAjaz Nawaz

I need to be able to tftp the config of our internet gateway router (outside 0) to a tftp server on the inside network 100. I also want to run Netflow (port 9090) data from the router to the same addr as the tftp server (my NMS).My ASA 5510 has an ou...

Hello I need help with a situation that is being reported to me. we have a pix 501 firewall that had a single vpn user name and passowrd for users to connect and we changed it so that each person now has the ability to connect with their own username...

I have a catalyst 6500 swtich containing FWSM and IDSM-2 module. Vlan 1000 is the outside interface for the fwsm to which all bussiness servers are mapped (vlan 900, inside interface of fwsm). I want to inline IPS all the traffic going to these bussi...