I would like to know if I am understanding the vlan assignment in NAC L2 802.1X correctly. As i understand it, once a client has been assigned a "healthy" posture token, they will be put in the "healthy" vlan. Does this mean that every "healthy" user...
I will order Cisco ASA5520-CSC10-K9, for Anti-X and the other services bundle.My question is, i will order another one for Active/Standby config., i think i need to order the second one as the first one (same licenses and modules).Does the ASA5520-CS...
A new twist to my ASA tribulations! :)I made a change to an access-list using ASDM, and it didnt work. As a good measure, since things have been in flux with it, I rebooted it via power switch. now it wont come back up. When I boot, I get the followi...
I am attempting to provision a Cisco 851 with 12.4(4)T3 using SDM. I do alright until I add and Easy VPN Server.At that time when the route-maps are added and the tool generates the route-maps associated with the dynamic and static NAT's in place thi...
We had sig 5474 fire on two sensors. After looking at the packet and then the Regex in the sig, this just doesn't make sense to me.The Regex:([%]20|[=])[Ss][Ee][Ll][Ee][Cc][Tt]([%]20|[+])[^\r\n\x00-\x19\x7F-\xFF]+([%]20|[+])[Ff][Rr][Oo][Mm]([%]20|[+...
I'm in the process of deploying an ASA5520 to a client. I've no problems with the firewall piece of the implementation, but I don't know where to start with the IPS piece.I've searched quite a bit about the ASA55XX & AIP-SSM, but can't seem to find m...
Hi,My current setup is like this Internal -- ISA FW -- PIX515E-R -- ROUTER -- INTERNET. I wrote a static mapping between internal mail server and public ip and allowed through accesslist (only smtp). Now i can able tos end emails and all but not able...
I have a 2611xm with IOS/FW 12.4After enabling IPS, I get the following when I show ip inspect sessions Session 83E4AD08 (192.168.5.101:8)=>(192.168.240.251:0) icmp SIS_OPEN Session 83C84EAC (192.168.5.101:8)=>(192.168.240.170:0) icmp SIS_OPEN Sessio...
This is a little 831 router (12.4.4T) with one private and one public interface connected to a 1000/256 ADSL circuit. There is a VPN to the Head Office with a GRE tunnel and EIGRP.The Tunnels bandwidth is set to 1544 since there is a frame-relay back...
Hi,I do new statics & ACLs in our PIX (v6.3) mostly by following working examples. Usually that works.The other day I tried to put in a new static, but then was unable to ping the outside address. Two things about the inside address I was trying to...
hi. I swapped out a pix 506e for an ASA, but built it from scratch instead of transferring the config. For some reason traffic wont seem to pass in or out of it, and I cant seem to figure it out. I attached the config.I added a gateway of last resort...
Is the standby address on the interface pingable in normal mode (Normal mode meaning primary is still active and 2nd one is still in standby mode)The reason to ask this is one of our customer configured the standby address which is used for another d...
