Network Security

I have 2 ASA 5520's and I have 2 ISP connections. 1 ISP is the primary and the 2nd will be uised as a backup. I know that with the 5505 security plus you can do ISP backup. IS this possible with the 5520 and is this the best way to configure the ba...

When clustering VPN Concentrators:Do config changes on the master propagate to the clustered devices?Or do you have to download the .txt file each time the master config is change?

Is it possible for an ASA5540 to do lookup DNS requests for say a PC if the PC has its DNS entries set to the ASA interface IP?

Hi,I tried installing a Cisco ASA5510 in our data center today. I assigned a public IP to outside interface and 10.x.x.x to inside interface.(Also configured a diff public IP for ASA management interface). I configured the default gateway of all my s...

hi all,i have a pix 506e on which we have a vpn "crypto map with isakmp" tunnel created with a second party to be used for particular business need.recently we are undergoing another project with them and for this they require us to allow specific ip...

Hello, I am new to vpn concentrator. This is a completely new LAN design.I am going to place an 2811 ISR router on my edge and my routers private interface is to be connected to the VPN concentrator. My local area network switch is connected to the ...

hi allis it possible to assign an ip address from inside ip range to the management port also.pls suggestRegardsBinoy

Hi,We have a pix 506e which is working fine for client side vpn access to our network (192.168.10.x).We now have a new site (192.168.20.x) and bought an ASA5510 to get a secure tunnel between the two sites. Although we have a tunnel established, we c...

Customer has an interfaces subinterfaced into two DMZs. Sh int shows a lot of discard packets which don't seem to be related to physical errors. I ran a capture on the ASA but this all looks good to me. Does the capture not show what came in but was ...

Hi,I need configuration help for PIX 525 with PIX OS 7.1My scenario is like this:Firewall inside network 192.168.1.0 /24Firewall inside interface IP 192.168.1.1Firewall outside network 192.168.2.0/24Firewall outside interface IP 192.168.2.1I have to ...

hi guyswhat is the diffrence between the retired cisco exam 642-531 and the new one 642-532thanks in advance

In version 6.49, I saw the introduction of the parenthesis to some variables in the built-in rule:Pre-649 Example: @(system)649 Example: @systemNot all rules have parenthesis with their variables - just some. Is there a benefit to the use of parenthe...

If we want our user community to have a new profile added (.pcf file) to their local Cisco VPN client what is the best way to do this without have to touch every machine. We have Cisco VPN 3005 and various versions of the VPN client.

Hello everbody, i'am here for the first time and i hope you can answer my question. We have an ASA-Server and the Cisco Security Manager 3.0.1. After we changed some things in the manager we want to submit and deploy the changes to the ASA-Server. Ev...

I have an issue where I need to set up a site to site VPN with a partner company through a PIX. The partner company has a site to site tunnel with a vendor that is a duplicate subnet to ours (10.0.0.0/16). Can anyone point me in the right direction...