Hello, I want to purchase a Cisco 860 Series router with security license. Can anyone tell me if I need any else license to configure a remote access VPN in Network Extension Plus Mode ? ... View more

Hello, I have Cisco ASA 5516-X. Which licences do I need for anyconnect vpn? is AC-PLS-25-S enought or may I purchase first essential licence ? ... View more

Hello, I have an access with ASDM problem on my Cisco ASA.  The configuration using ASDM was working well before. But now w hen I attempt to connect with ASDM, I get: Unable to launch device manager from 172.28.0.250 There is the configuration for ASDM: aaa authentication http console LOCAL http server enable http 172.28.0.248 255.255.255.252 management Help me please! ... View more

Hello, I have a Cisco ASA on my network edge. I have INSIDE, DMZ and OUTSIDE.  There is a PAT rule for inside LAN users: nat (inside,outside) source dynamic Users_LAN interface Now I have installed a Web server in DMZ and I have a second public address I want to dedicate to the web server. How can I configure a one-to-one NAT between the private and the public address of the server? Note: I do not have access to ASDM and I am using CLI. ... View more

Hello, I have a Cisco 1911 Router with one outside interface.  I have all ready configured site-to-site VPN tunnel (With IPSEC) between my site and a partner site. Now I am asked to configure a second VPN tunnel between my router and our HQ site.  Is it possible to maintain the first tunnel and build a second tunnel Ipsec Site-to-site VPN on my router Cisco 1911 ? If not, whitch design and configurations are recommended ? I attached the first tunnel configuration on Cisco 1911. On our HQ Site, we have a MikroTic router... ! crypto isakmp policy 1 encr aes 256 authentication pre-share group 2 lifetime 28800 crypto isakmp key xxxxxxxxxxxx address xx.xxx.xx.xxx ! ! crypto ipsec transform-set TSGMT esp-aes 256 esp-sha-hmac ! crypto map GMT_BZR 1 ipsec-isakmp description Tunnel toxx.xxx.xx.xxx set peer xx.xxx.xx.xxx set transform-set TSGMT match address 101 ! ! ! ! ! interface Embedded-Service-Engine0/0 no ip address shutdown ! interface GigabitEthernet0/0 description WAN Interface no ip address ip virtual-reassembly in duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 ! interface GigabitEthernet0/1 description LAN Interface ip address 172.30.31.126 255.255.255.224 ip nat inside ip virtual-reassembly in duplex auto speed auto ! interface Dialer1 ip address negotiated ip mtu 1492 ip nat outside ip virtual-reassembly in encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 dialer-group 1 ppp authentication chap pap callin ppp chap hostname 2600-omar ppp chap password 0 cong-2600 ppp pap sent-username 2600-omar password 0 cong-2600 ppp ipcp dns request accept ppp ipcp route default ppp ipcp address accept no cdp enable crypto map GMT_BZR ! ip forward-protocol nd ! ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ip nat inside source list 102 interface Dialer1 overload ip route 0.0.0.0 0.0.0.0 xx.xxx.xx.x ! access-list 101 permit ip 172.30.31.96 0.0.0.31 91.240.72.64 0.0.0.31 access-list 102 deny ip 172.30.31.96 0.0.0.31 91.240.72.64 0.0.0.31 access-list 102 permit ip 172.30.31.96 0.0.0.31 any dialer-list 102 protocol ip permit ... View more

Hello, I have already purshased ASA5515-K9, but I need now to deploy ASA5515-FPWR-K9. Please, can you help me identify complete ordering informations ? ... View more

Hi, I want to purchase a FirePOWER product as IPS solution in my infrastructure.  I choose to purchase the FirePOWER 8000 but do I need also to purchase the FireSIGHT Management Center or can I use only FirePOWER 8000 appliance? Is it also possible to use in stand alone the FireSIGHT Management Center as an IPS appliance ? ... View more