Hello, If you have a vpngroup (3.x client) that is recieving a split tunnel ACL for the sole purpose of allowing non-encrypted traffic out to the Internet, can you also have radius upload a network access ACL to provide per user network access co...
We are using PIX 515E and Cisco ACS 3.0.2.What is NAR. I've read almost every Cisco document on the topic, but I was hoping that someone could explain it to me in plain english and perhaps by siting an example of how it may be applied.Also, does i...
Dear All,Question regarding PIX501 NAT Traversal. The following is the network diagram.VPN3000-----Internet----ISDN Network-------NAT router-----PIX501- VPN Tunneling between VPN3000 and PIX501 . PIX501 configured as hardware client.- NAT router doin...
Hello,I realize that IDS-Policy Manager does not come with email alerting. For this functionality I would need VMS or CSPM 2.3i... Would anybody from the IDS product team, (or Cisco in general), know if email alerting is in the works, for future ve...
I have two Win2k servers running ACS 3.0 (evaluation). I have configured one as primary and the other as the backup. When I try to replicate I get the following error in the CSAuth log: on the primary server. I am using the ACS database.AUTH 11/13/20...
Hi All,attached is our config file of PIX.515. I have few question in regardof its configuration and I will appreciate if any of you can answer myquestions.1. I need to block internal users from using any chatting softwareplease advice what do I need...
I am using the Unix Director and I want to know how I would go about setting up heirarchical directors. I have 3 lower tier directors that are used to manage the sensors and collect events. I want those 3 directors to forward their events to a single...
Here's the deal.We have a switch that's outside the PIX. All internal switches are configured for tacacs+ using ACS 2.6 for NT. I need to lock down this switch although I'm unsure as to what would be the best method. Do I configure tacacs+ on the swi...
The ACL apply to the Group Asyn 1 interface isn't work.I need filter the traffic that isn't encripted that point to 192.168.10.11 ip address (loopback 0).This is the configuration:interface Loopback0 ip address 192.168.10.11 255.255.255.0interface Gr...
Please have a look at this example:http://www.cisco.com/univercd/cc/td/doc/product/core/7100/swcg/6342gre.htm#xtocid50hq-sanjoseinterface Tunnel0 bandwidth 180 ip address 172.17.3.3 255.255.255.0 no ip directed-broadcast tunnel source 172.17.2.4 tunn...
Hello everyone. I have an issue here.. I wonder if someone knows wether is it possible to configure a dynamic IP address at the "destination command" into a tunnel interface.Supose we are trying to bring up a VPN connection, so at one side we have a ...
