Network Security

Hi..We have several Win XP clients (L2TP over IPSEC) connecting to an MS ISA VPN Server located behind our ASA. Currently there is no luck connecting those clientsHome PCs (Win VPN clients) <-----Internet----->ASA<----->MS ISA Server (VPN Server)<---...

HiWe have an IDS4215, which has recently been upgraded to 5.1.1. This was to enable the IPS functionality within the device.I want to implement the IDS 4215 in IPS mode but I may need it to protect traffic between a number of different subnets (VLAN...

Hi...We are usinng an ASA 5520 as a front end firewall and an ISA server as a back end server. The latter is connected to the inside interface of the ASA. All the LAN PCs are connected to a second interface on the ISA. The design looks like thisInter...

I posted here and got such a good response to my last issue - I hope I am not being a pest. ** Main Location no issues out to internetcrypto ipsec transform-set myset esp-3des esp-sha-hmac !crypto map bhsn 10 ipsec-isakmp description VPN to PARC se...

I have a pix 501 with the outside interface set to dhcp.The inside interface is 10.6.1.1How do I forward ftp traffic to 10.6.1.10? also I want to forward port 15000 to port 3389 to host 10.6.1.11 and finally port 80 traffice to 10.6.1.12I tried a sta...

I was wondering if I could ask you a question regarding the pix. We are looking into an alternative way of working around the isa server. We are looking into having a connection from the pix to the switch. Could we configure on the pix to connect d...

Is there a command I can enter in my config on the pix to log inbound traffic that is trying to come through a certain port? If so what is the command and how do I access the log?

I need to open port 3306 for inbound traffic on pix 515 E so i added the follwing line in after my other ports:access-list InboundFilter permit tcp any any eq 3306I also have the line:static (inside,outside) (my public removed for security) 192.168.1...

The only way I've found to get info on a specific ip is by capturing the interface and doing a | include.Without setting up an entirely new Access list is there any way to dump a specific ip adress?

Suppose I setup three zone; outside, inside, and dmz. I have one host in each of the zone for a total of three.Both Outside and DMZ are public addresses. Inside is of course using private address. If I label HostA in outside zoneHostB in dmz zoneH...

Hello,Guyswhy cann't I open this URL of NAC flash demo,Error appears under the web when I openUrl:http://www.cisco.com/cdc_content_elements/flash/nac/demo.htm.It is error all the same after I installed flash player.How do I open this Url.Thank you!Re...

Hi,I have a cisco 2811 router which is connected to 4 routed vlans. I would like to control the bandwidth for the users on these vlan because these vlans are public hotspots. Some users are choking the whole bandwidth due to which others are unable t...

Can VMS be used to upgrade the IPS version on sensors? Or do you have to log into each sensor and upgrade that way?

Hi I have a pix 501 that keeps rebooting and I get the following message: "Checksum verification on uncompressed PIX image failed" How can I fix this?Thanks.

Our company forgot the Administrator password of NM-CIDS installed on 3600 router. Now, we can't login on this device. Therefore, I like to know how to do password recovery on this NM-CIDS.ThanksRegards.