Network Security

Hi,First off this is my first Site 2 site I have setup from start to finish. I want to setup tunnel with a client to access there mainframe. My inside addresses allowed thur will be 192.168.x.x/29, and access 2 IP on the clients side. In PDM I create...

Does anyone know something concerning to the following issues?Please teach me what I can refer to on the WEB,if possible.1. Is there any way to apply the policy(checking OS/AV) to the kind of client devices which CAA hadn't been installed such like g...

Can I redirect traffic coming from the Internet to different internal devices based on the source IP of the Internet user with an ASA5510, (for the same service)?For example, if I have 2 web servers with inside IP addresses 192.168.10.10 and 192.168....

I need a way to monitor router interfaces status with history records.I configure the router snmp-server trap-source f0/0snmp-server host 172.17.1.26is there any option that can help me to monitor all the sites router interfaces.I'm also using wt's u...

I'm seeing exceed MSS errors for Cisco remote access and tunnel VPNs passing through or terminating at ASA 5510 (7.2.2).I have found documentation to set to ignore MSS via a map class, but I'm confused: aren't cisco VPNs compliant with Cisco ASA rule...

hi, am having trouble configuring a 506e firwall which is currently setup in a lab, i think there is a problem with the acl's or the static routing but not sure so here is the config.thanksAlex

we began hosting our company website today. All the necessary changes were made at the Domain Registar. You can view our website from outside our corporate network, but I'm getting a 404 timeout error when trying to the view our website from inside o...

My current design requires both "ra" and "l2l" on the same box. I understand that I need to define crypto map for each, and the "ra" requires dynamic crypto map. My question is that which crypto map I should assign a lower number, "l2l" or "ra". I gu...

we have a site-to-site VPN with our client based Dubai, unfortunately we are having an overlapping issue between the link.Client IP pool i.e. 172.16.10.0/24 is the same as our DMZ pool we assigned. It is not possible for the Client to change their ne...

hi guys, when i m defining a transform set we usually enter the security parameters like esp-sha-md5, but normally it requires total of 2 or more parameters, but when i enter esp-des it accepts it !!! why doesnt hashing was required ???

Hi everybody, A customer wants to configure different groups of webvpn profiles. group 1 and group 2 only depends on 2 local user accounts with only 2 url sides. authentication of group 1 and 2 should be the local asa useraccounts. group 3 is the def...

HiI have a ASA 5510 with a CSC-SSM and i have special question concerning the CSC features.I would like to use a different set of CSC features for two types of traffic.--> Standard Workplaces (Source Subnet 1), URL blocking, threath/virus protection-...

Hello,I just setup a VPN tunnel between 2 PIX's. But my PIX 501 drops the connection in about 10 minutes. What I noticed is that when I reload, I can ping outside ip addresses form the PIX and the tunnel is up. However, in 10 minutes the tunnel is do...

I was given a Cisco Pix 501 firewall and have found out that I cannot login to it. I want to do a factory reset on it to get it back to the defaults. I found some documentation on the net but I am running into some problems when I try to tftp the ima...

Is proxy ARP on by default on PIX firewalls? I've got a PIX 525. Is there a way I can tell if it is or not?