Network Security

Does the below config allow (just from a NAT perspective)hosts on the 10.1.1.0 subnet to access servers on the 192.168.1.0 subnet?It this NATing the FTP interface to the 10.1.1.10 address?if so, would this over rule any access-list that was applied i...

Hi folks.I'm doing an WebVPN pilot on one of our ASA's (running 7.2.2). Everything is working fine, but I've been asked to restrict access to users that are members of a certain Active Directory group (lets call the group "VPNTEST")Right now the ASA ...

We have ASA 5510 with standard port use: Inside, DMZ and outside(T1). Leaving Eth0/3 unused. We are considering getting DSL for a redundant Internet connection, could we use Eth 0/3 somehow for failover?Or is this better suited for a different device...

With CSM 3.0 I was able to administer global tuning by logging into CSM, choosing Management Center, Configuration, Global and I could begin.In 3.1 where Management Center used to be I now have Auto Update Server. Of course Auto Update Server doesn't...

Hi,I have one question regarding signatures update, are the Cisco new signatures include the new updates plus the old ones or just the difference between the latest update and the previous one?If I have an IPS which has never been updated for a year ...

Hello everybody,I have a remote 871 (see attached config) connecting to a head end 3030 doing ezvpn-network extension mode to corporate. I would like the remote to be able to access a couple of servers on the provider's network on 172.30.1.0/24 outsi...

I have a fail-over pair. I can get ssh/https into the primary but not the secondary. I can only get into secondary after taking primary off-line. There's no VPN on the box. Could someone please give me some hints why I can't get to the secondary?

I am aware how CBAC does work , please look at the figure below (step 2) :http://img484.imageshack.us/img484/7679/cabcib1.jpgIn step 2, he says: " CBAC creates a dynamic ACL allowing return traffic back through the firewall "Does he mean by: " CBAC c...

One of the rackmount brackets that comes with the ASA5500 series has a forward facing plate that sticks out beyond the front of the ASA. I have guessed that this is to take the second cable management arm, but this seems rather useless. What exactly ...

Hello,i have some problem with NAC ASA and CTA work.Try to configure ASA to work with NAC.Conditions:VPN is connected and work fine (ping from local comp. to inside network via VPN)CTA is installed and property work with wired 3750 (in NAC-L2-IP NAC-...

Hello everyone,I am setting up a PIX515 FO. It is currently on the 6.3(5) software. My UR PIX is running 7.1(1)I want to upgrade my FO to the same version, but the upgrade sheet says it requires 128MB RAM to do so; it currently has 64MB. Can I upgrad...

Hi We are using pix 525 with ver 7.0 now, cpu usage is about average 30%, sometime go up over 50%. If use ASA 5520 replace pix 525, how about for cpu usage improve?Thanksben