Network Security

Anyone know the best way to block Instant Messaging on an ASA (7.1) box? I'm taking that using a service policy is the correct method? I'm currently using the default service policy so I'm not sure what I need to remove from the default policy to acc...

Hi,we recently connected through extranet (leased line) with a partner, to use a web based application written with java servlet applets. We got complaints from our users that the time for pages to load is very long. We did some latency invastigation...

Hello Sir, I have 1 PIX 520-DC, now i want to creat 1 VPN. my remote site engineers wants to connect or use my corporate services. I have some knowledge about VPN so i can creat it with 2 methodes 1 with Cisco VPN client and 2 with PPTP and L2T...

Hi All,I am wondering if anyone has been able to get NAC v2 working with OfficeScan 7.0.I have been trying for some time now, but have had no success. I can get NAC working with OfficeScan 7.0 if I use CTA v1, but when I install CTA v2.0 on the clien...

Hello I am hoping someone can help me with this.On a site to site VPN with 2 Pix firewalls. I need to be able to use wins resulution for printers and such. remote network is connecting across the IPSec tunnel to a terminal server. In normal situation...

Hello,I have a problem with my NAC 2 802.1x labACS 4.0 - External validation posture server declared in http://192.168.10.128:8081/antibody/cgi-bin/PostureRequest.dll?PostureRequest - Network Access Profiles: Posture validation with TrendAV Creden...

Hi,My customer would like to have read-only access on the ASA , I tried to configure this in the ASDM but the new user has always full access. I configured the user with privilege level 1 ( tried several levels ) but with the same result. Can somebod...

how can I clear the "active time" on a pix configured for failover? (the time that shows when you do a sh fail)

Hi,I have an a Wan which is deploy to 15 VPN from my Site General (headquarter)and 15 hotels (remote site).On the Site General there is an a Isa Server Microsoft 2003 where are terminated some tunnel IPsec or PPTP and it depend if on remote site the...

Hi,In some cases, I get packets dropped whith the following reason :"Bad option length in TCP"Is there a way to create a TCP-Map to accept these packets anyway ?Thanks,Regards,Gaëtan

as titled.

Hi,i've configured a pix for adsl connection.I've followed what's written in this url:http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00801055dd.shtmlI can't ping the router , i use 2611.Here is the output of "sh...

hii'm building fair small project, and it requires me to have a firewall (pix) and i need to have a load balancer, i know we using some cisco load balancer module at work, i dont know which one for sure, but i was wondering if there is some add-on mo...

We upgraded our 525 active/failover cluster to 7.X and immediately began having issues with the devices failing over and back and CPU spiking. When this happened the telnet and enable passwords would become corrupt and we had to reset the passwords....