Network Security

Hi Guys,I just want to know, we currently have a PIX solution with a passive failover box. With PIX you can license a box for passive failover only (the secondary costs less money). Is this also possible for ASA, or do you need 2 'fully licensed' mac...

ASA 5520Here is my situation, I have an internal FTP server that is NAT'd to address a.b.c.d for purposes of recieving FTP's from the outside world via a DNS entry for our domain. That same server I need to FTP out to a vendors site, here is the cat...

Hi!I need to use a firewall in order to protect a public network for accessing Internet. In my network, I have around 100-200 users and I want to allow them to use p2p software (like emule) although I would like to limit the bandwith and number of se...

We are experiencing poor network performance when connecting from hardware VPN sites. VPN sites have Cisco Hardware VPN client 3002 which terminates to Cisco 3005 VPN concentrator. Geting upload/download speeds of 355/484kbsp from VPN to surewest.c...

Hi all, I use Cisco VMS 2.1 and update to Cisco VMS 2.3 to manage IDSM (version 5) but now I see an error. I have a license of Cisco VMS 2.1 and when I update to Cisco VMS 2.3, I use the same license file but I see the error in Cisco VMS "Error abou...

I need to migrate some customers from Checkpoint over Cisco Pix firewalls, NOT ASA.Currently in the checkpoint security policy, we onlyallow snmp version 2 and version 3 to traverse thefirewalls. Furthermore, we also allow only ssh version 2 from tr...

Not sure if this is the right forum for this questions. I have a vpn concentrator 3005 with it's private interface connected to a dmz interface on my pix. The public interface to a hub hanging off my router facing the internet.I have a vlan set-up ...

Hello,An existential question:Why the FWSM doesn't support hsrp or vrrp ? Is it possible to see something like that in the future ?In a robust solution, 2 routers in front of the blade (in multi-mode) with 2 routers behind the blade need to peer BGP ...

Good day folks,I have tried hard to find examples for the following scenario without luck. Here is my IOS (not PIX) problem:Because of overlapping addresses problems, I have to allow internal clients to connect to servers through a router with static...

Hi;Can I setup multiple context A/A setup on ASA 5520 , and have the fastethernet configured for DMZ access , and Can A/A been setup on DMZ side ?

Hi There,Can source-based routing be achieved in ASA, as in routers with route-maps, using the policy and class maps configuration?Regards,Haitham

I am going upgrade my Cisco 3660 Router by one Cisco 3845 ISR, I need Firewall Feature Set in my new router but I have to use the NM-1A-E3 used actually. Is compatible the CISCO3845-SEC/K9 Bundle with IOS Advanced Security for the NM-1A-E3 module? Th...

Is there any change required for intervlan comm. on FWSM with same sec levels other than usual conf like sec level,ip add,nameif on the specific int/vlan.

how does intervlan comm. happen in FWSM.