Network Security

Hi,the setup as following, I have 3 FWSM installed on 3 different 6513 switches, two of them are on active/standby failover mode and the last one installed on disaster recovery area as a backup stand alone FW.My concern is to have the 3 FWSMs in fail...

We need to establish two site-to-site VPN sessions with different vendors. The problem is that each vendor is requesting us to use a specific IP range that they are providing to us and want us to statically NAT static (inside,outside) each worstation...

Hi all,I want to ask if there are some experiences on ACS 3.3 for Windows running on a virtual machine under VWWAREIs it a tested configuration?My question sourced by problems to import certificates on an ACS running under the a Windows virtual machi...

Hello all,I have a particular question and would like to know if this is feasable from a staic NAT translation perspective on a PIX firewall and a remote inside network. Equipment: PIX 515E version 6.3(3)Physical Interfaces 6Design on Network Site A:...

Hi,We've got a windows server with a private 10.0.0.x address that is behind an ASA which is doing static NAT to it. I've opened up port 80 on the Fw to allow access to it but when you try accessing it, in the HTTP response it returns Content-Locatio...

I'm having no luck here. I have tried entering default routes, static routes, etc from both the CLI and the ASDM console.I am replacing a 2621 router which we had working just fine, but I can't duplicate the functionality we had with the router.I hav...

Have routing or other Cisco types of devices gotten to the state where they can actually provide a DMZ with http/s services without physical servers in the DMZ?

The IPS does not block Google Talk. I have investigated that uses the port 5222 and that is a type of Jabber. How can to block this type of messenger?

Hello All,My internet connection has been slowing down over the past 2-3 weeks. I use Comcast Cable, so I wasn't surprised. It's gotten to the point that I cannot receive HTTP requests.I used Ethereal/Wire Shark to look at packets and found packets w...

I have the "inside" interface configured on the Management0/0 interace. I have 1 spare GigabitEthernet0/3 interface that i would like to use as the "inside" since theres a Gigabit switch at the back end. and leave the Mgmt interface for management pu...

i have next config for pix515e-nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 branches security50global (outside) 2 interfacenat (inside) 0 access-list vpn_outside_1nat (inside) 1 0.0.0.0 0.0.0.0 0 0nat (branche...

hi,this is my first time i am setting up remote access. please see below my vpn configuration:I want my connected vpn users to be able to connect and get an ip address from the pool difcweb and should not be able to browse internet.at the moment when...

Hello, Assume that I have a OSPF multiarea network where there is two IOS routers that act as ABR. Assume that I like to replace them with an ASA, Do you see limitation on ASA as ABR ? Summarization ? others ...?