Network Security

Hello all,I have trouble with a vpn site to site.Architecture is :Internal ---- PixV_7.2(1) ---- internet ----- Pix_V6.3(2) ---- Remote site (london)Connection is ok: Crypto isakmp sa I use sysopt connexion permit-vpn and permit-ipsec, and all the su...

We have PIX with 3 interfaces: two outsides and one inside.Inside int goes down once in every 1-2 month. Both switch and PIX show int was up but couldn't send traffic across.Shut/No Shut and rebooting both devices did not help. But strangely, when pi...

Hi,I'm investigating a HARD AD SSO issue on NAC appliance and checking the doc suggested by Prem (Troubleshooting Windows SSO)I don't understand how I can obtain the output in page 14 (title: Debug Logs from Agent).I've activated the event.log (addin...

Hi, I have a lan-tp-lan vpn between ios router and ASA5500 version 7.2.2. The tunnel ist established and the tunnel policy is specified in tunneling GRE traffic from the inside ip of the router (10.170.38.1) to another router (10.201.116.2) behind of...

Please see attached Word document for the problem. Thanks

I'm currently trying to setup a CS-MARS 4.2.1 to monitor my network devices. I have seen in the configuration guide that it supports cisco swithces and ASA IPS modules, what about a router IPS module? (NM-CIDS)I'am already added the IPS module to MA...

Have 2 PIX535s each at remote sites configured for LAN-based failover. There is a VLAN("abc")designed for failover, but in that same VLAN are servers. My setup is as follows: PIX535 connects to a DMZ switch using 4 connections: the Inside intf & 3 ot...

Does anyone have a reference for understanding how to create Event Action Filters? I had a filter in place to remove the false positives created by my Proxy servers and the rule has disappeared. I still have the $HTTP_PROXY variable just no rule. I c...

Hello:Does anyone have a step by step upgrade procedure for upgrading the PIX from v7.0 to v7.22 ?I have tried the normal upgrade procedure similar to the one available for 6.3 to 7.0, but i get an error saying "Not Enough Space on Device"..even if i...

MARS continuously changes the pager lines setting to '0' on a client ASA, when MARS attempts to pull a config. Is there any way to change this behavior? It's really annoying. You can obviously change it, but when MARS accesses the ASA again, it sets ...

Hi net pros,Can someone point me to more information about the fixup engines?!We have to secure a callmanager server farm behind a fwsm, running version 2.3.3.9 - next week we will upgrade to 2.3.4.12.We would like to use the mgcp and the skinny fixu...

Dears, We have web server in DMZ zone of PIX, static statement from outside,DMZ has been added to publish the server to the internet, the site is accessible over the internet without any issues. The issue is when any user from inside the network trie...

Hi, I'm trying to set up PAT on an ASA550 for host on the inside but I'm not able to. Here's my config. please helpASA Version 7.2(2)!hostname ciscoasadomain-name default.domain.invalidnamesname 192.168.1.10 WebServer description Inside Web Server!in...

I can ping from Machine 192.168.40.8 to PIX and vice versa. I can not ping from either Machine or PIX to the outside Internet.Can someone look at my config and see what I am missing. Also I am prohibiting machine 192.168.40.10 to browse internet.PI...