Network Security

i have next config for pix515e-nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 branches security50global (outside) 2 interfacenat (inside) 0 access-list vpn_outside_1nat (inside) 1 0.0.0.0 0.0.0.0 0 0nat (branche...

hi,this is my first time i am setting up remote access. please see below my vpn configuration:I want my connected vpn users to be able to connect and get an ip address from the pool difcweb and should not be able to browse internet.at the moment when...

Hello, Assume that I have a OSPF multiarea network where there is two IOS routers that act as ABR. Assume that I like to replace them with an ASA, Do you see limitation on ASA as ABR ? Summarization ? others ...?

Hello All:This is not directly related to any Cisco product but rather a general question regarding placement of servers, open ports etc. Hopefully someone can shed some light on this for me.I understand the concept of the DMZ, to isolate those serve...

i recently upgraded my pix 515e from 6.35 to 7.22 but from then i am not able to configure failover . an error message comes on the secondary pix as VPN-3DES-AES : Disabled I believe that this feature in the pix is disabled so the failover is not wor...

I am trying to configure a pix 501 as a vpn client to connect to a VPN3000 concentrator, using a microsoft CA server. I have achieved this without any problems using the vpn3002 hardware client but I can't get the pix to authenticate and get the cert...

We are trying to setup a 2811 router to run IOS based IPS. We followed all the procedures but we can't seem to get the system to send any alerts via syslog. We have tried various port scanners with no luck. Are we missing something?

I was trying to find some design reference for the Guest-WLC and NAC integration guide. Anyone can share some experience/cisco docs/links?

Unfortunately we need to have a customer be able to access a server of ours with DCE RPC. Is there any way to have cisco CBAC to handle the UUID number of the RPC? How do you do it (besides not allowing this), do I need to purchase something else lik...

I am trying to configure the Firewall to open port 491. Appearently I am doing something incorrectly or failing to do something correctly in order to open this port. I have configured a security policy rule specifing the port and a service policy rul...

i have set up a dmz on the asa5510 with a web server in it. when i try to connect to the server from outside i see the SYN packet hit the server but the client never receives the SYN/ACK even though server definitely sends it. that made me try and ac...

Hi, during debug phase of dhcprelay on ASA 5510 version 7.0(5), we received a message with threshold of 100 not answered request, after that the dhcprelay service seems to stop to relay request to a failed dhcp server.It's true ?thanks

Hello all,I'm having a little problem getting a site to site vpn tunnel working between an 1800 IOS router and a 5520 ASA. The tunnel negotiates and comes up ok however the clients at each end are unable to communicate. Site A shows that it is receiv...

hi all,ive a CSC module attached to my ASA 5510 and if i see the service policy there is a Global policy which is default i believe, and i tried configuring SMTP for antispam service i tried adding a diff service policy for diverting the traffic thru...