Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About doug_counsil
08-24-2018
Stats
Member since
10-22-2011
227
Posts
10
Helpful
5
Solutions
Created by
doug_counsil
in Small Business Security
in Small Business Security
04-05-2013
07:16 PM
04-05-2013
07:16 PM
IE 10 must be running in 64-bit mode. Follow the first post on this page and ensure IE 10 is running in 64-bit mode. This is what we had to do in order to get SSL VPN to work on Windows 7 Pro 64-bit machines running IE 10. http://www.ngohq.com/news/23295-how-to-enable-64-bit-internet-explorer-10-in-windows-7-a.html
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
02-27-2013
10:48 AM
02-27-2013
10:48 AM
I don't think the latest firmware versions will allow you to use the same subnet for SSL VPN users as the main subnet. In case it helps: We use the defaults on the SSL VPN Client page (192.168.251.1-begin/192.168.251.254-end), but click Enable Split Tunnel Support as we don't want Internet traffic to be routed through the VPN tunnel (this is up to you). We also had to create a Configured Client Route to our main subnet (192.168.75.0/255.255.255.0). We also create a global "deny" policy for all ports on all IP networks. Then create user specific 'permit' policies for the IP network (192.168.75.0/24) we want them to have access to, as well as, what ports (3389 for Remote Desktop and 4900 for VNC). If you don't create a global "deny" policy for all ports on all IP networks, the default is a global "permit" for all ports on all IP networks!!! This defeats one of the main benefits of SSL VPN (the ability to tighten access).
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
12-28-2012
10:54 AM
12-28-2012
10:54 AM
I opened a TAC case for the invalid link descriptions. The case number is 624313101. I also inquired about when we could expect the next IPS signature update.
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
12-27-2012
02:31 PM
12-27-2012
02:31 PM
Firmware 2.2.0.7 has been released but the IPS signature links are still broken. When should we expect new IPS signatures with links that work?
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
12-27-2012
02:30 PM
12-27-2012
02:30 PM
Firmware 2.2.0.7 has been released but the IPS signature links are still broken. When should we expect new IPS signatures with links that work?
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
12-22-2012
11:43 AM
12-22-2012
11:43 AM
Cisco has released new firmware for the SA500 Series routers. It's version 2.2.0.7 and can be downloaded here: http://software.cisco.com/download/navigator.html?mdfid=282414017&i=rm We have been running on this version on our SA540 for months. Other than some changes to logging that we don't particularly like, it has been a very stable release for us although 2.1.71 was extremely stable in our environment as well. Our environment: SA540 (gateway router) three Linksys E4200 v1 routers (configured in "bridge mode" which turns the devices into WAP's) Netgear GS724Tv3 switch (with two ports in LACP link aggregation mode which are used by our Synology NAS) Synology DS1812+ NAS (in link aggregation mode) Several 5- and 9-port unmanaged switches Several Windows machines (PC's, servers, laptops) of many flavors Several MAC laptops of many flavors connected via wired and wireless Several tablets (iPads, Kindles, Touchpads, Xooms, etc.) of many flavors connected via wireless Several smartphones (iPhones, etc.) of many flavors connected via wireless At any one time we have ~75 active devices on our network of which ~25 are wireless. Max ~100 devices. We utilize IPS and ProtectLink. We do not take advantage the ProtectLink email protection or license the ProtectLink Endpoint functionality. BTW, our cable modem is directly connected to our SA540. Our SA540 is directly connected to our Netgear switch. Nothing else is connected to our SA540. Our Netgear switch, and to a small part our numerous unmanaged switches, do all of the heavy lifting. Our SA540 and Netgear switch handle all of the traffic with ease, but we are a relatively small shop.
... View more
Labels:
Created by
doug_counsil
in Small Business Security
in Small Business Security
12-07-2012
01:52 PM
12-07-2012
01:52 PM
50 Mbps is probably more realistic with IPS enabled. Most of our traffic is over SSL (VPN, etc.). I think the deep packet inspection is very resource (CPU) intensive for SSL traffic. Thoughts?
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
12-07-2012
10:52 AM
12-07-2012
10:52 AM
We have an SA540 and can only achieve ~18 Mbps throughput if IPS is enabled. Verisign VIP and ProtectLink Web do not seem to adversely affect throughput however. IPS signatures aren't kept up to date anyway so using the IPS functionality is somewhat pointless. I hope this helps.
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
10-26-2012
02:36 PM
10-26-2012
02:36 PM
Thanks Johnn. We ended out deploying a switch that supported VLANs and inter-VLAN ACL support. It was as simple as moving all the network cables to the switch, connecting just the switch to the SA540, re-creating the VLANs on the switch, and creating the ACL rules on the switch. We found that the switch provided us with much greater throughput than the SA540 anyways.
... View more
Created by
doug_counsil
in Small Business Routers
in Small Business Routers
10-09-2012
09:18 PM
10-09-2012
09:18 PM
Oh, our SA540 has been running for four days now and it is at 80% memory usage. We deployed the 2.2.0.7 firmware just this weekend. I'll let you know if we encounter any memory spikes, but we have always hovered around 80 - 85%. I don't see the 2.2.0.x firmware universally decreasing memory usage, but I can see it fixing some bugs that might cause some memory leaks.
... View more
Created by
doug_counsil
in Small Business Routers
in Small Business Routers
10-09-2012
09:10 PM
10-09-2012
09:10 PM
We use an SA540 as our gateway/VPN router and have a 24-port Netgear switch connected to it. We have dozens of devices connected to the Netgear switch, including three WAPs (which have dozens of users connected to them at any one time), but only the Netgear is attached to the SA540. We regularly achieve 950+ Mbps throughput from device to device if they all have gigabit connections. Wirelessly we can easily achieve ~300 Mbps throughput depending on the device, wireless NIC, number of users, load, etc. We have an 1812+ Synology NAS connected to the Netgear using Link Aggregation. We easily achieve 160+ MB/s throughput with that guy. We use Trend Micro ProtectLink Web and IPS and our RAM usage stays right around 80 - 85%. We reboot monthly, but we have had our SA540 run for over two months without any issues. 2.1.78 proved to be quite stable for us. We are running 2.2.0.7 right now because we are trialing the Verisign VIP functionality. Sorry to hear that your SA520W is giving you grief. Our SA540 is a work horse. Our Netgear switch does all the work though regarding file transfers.
... View more
Created by
doug_counsil
in Small Business Routers
in Small Business Routers
10-08-2012
12:08 PM
10-08-2012
12:08 PM
We deployed Beta firmware version 2.2.0.7 this weekend. Verisign VIP has been fixed in this release. Just FYI...
... View more
Created by
doug_counsil
in Small Business Security
in Small Business Security
10-04-2012
10:31 AM
10-04-2012
10:31 AM
Peter, This really needs to be addressed. As I mentioned above we are using ProtectLink Web and IPS and we don't experience any http request lag times, but we are also running Beta firmware. Actually we are planning on deploying a newer Beta release this weekend in an attempt to fix a Verisign VIP issue. That Beta version is 2.2.0.7. You should really contact Cisco and open a case about this. Perhaps the Beta firmware will address the issue? They have made some ProtectLink enhancements (i.e. logging). Perhaps it's a simple configuration issue on your side? Maybe TrendMicro needs to get involved? We really don't know until Cisco tech support gets involved. Do you have TAC access? Cisco Small Business support has been VERY responsive to our needs. Just give them a call. FYI, you can get TAC access by purchasing a 3-year maintenance support contract for your SA500 Series device. I believe it only cost us around $70. We procured it from www.cdw.com and it only took a few days to get setup. CDW and Cisco do all the setup for you. That's why it takes so long. They tie your device (by serial number) to a Cisco contract. It's quite painless and well worth the investment, IMO. To purchase a 3-year contract and gain TAC access: https://www.cdw.com/shop/products/Cisco-Small-Business-Service-extended-service-agreement-3-years/1843815.aspx To contact Cisco and open a case with them over the phone: http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
... View more
Created by
doug_counsil
in Small Business Routers
in Small Business Routers
10-02-2012
09:12 AM
10-02-2012
09:12 AM
Here is what we used to determine what license to buy. FYI, we have an SA540 and we purchased L-PL-WEB-3= http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5739/ps5723/ps9952/ps9953/end_of_life_c51-598329.html
... View more
10-01-2012
05:24 PM
Yes. You have to call tech support and request it. They will have to escalate your request to level 2 support. Level 2 support will have you digitially sign an MUBTA. After that you will receive a link to download the Beta firmware. We are currently running 2.2.0.3_1. It did not fix our particular issue so we just downloaded 2.2.0.7. I am planning on deploying the firmware this weekend. Here is how you contact tech support: http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
... View more
Created by
doug_counsil
in Small Business Security
04-05-2013
04-05-2013
IE 10 must be running in 64-bit mode. Follow the first post on this page
and ensure IE 10 is running...
Created by
doug_counsil
in Small Business Security
02-27-2013
02-27-2013
I don't think the latest firmware versions will allow you to use the
same subnet for SSL VPN users a...
Created by
doug_counsil
in Small Business Security
12-28-2012
12-28-2012
I opened a TAC case for the invalid link descriptions. The case number
is 624313101. I also inquired...
Created by
doug_counsil
in Small Business Security
12-27-2012
12-27-2012
Firmware 2.2.0.7 has been released but the IPS signature links are still
broken. When should we expe...
Created by
doug_counsil
in Small Business Security
12-27-2012
12-27-2012
Firmware 2.2.0.7 has been released but the IPS signature links are still
broken. When should we expe...
12-22-2012
Cisco has released new firmware for the SA500 Series routers. It's
version 2.2.0.7 and can be downlo...
Created by
doug_counsil
in Small Business Security
12-07-2012
12-07-2012
50 Mbps is probably more realistic with IPS enabled. Most of our traffic
is over SSL (VPN, etc.). I ...
Created by
doug_counsil
in Small Business Security
12-07-2012
12-07-2012
We have an SA540 and can only achieve ~18 Mbps throughput if IPS is
enabled. Verisign VIP and Protec...
10-26-2012
Thanks Johnn. We ended out deploying a switch that supported VLANs and
inter-VLAN ACL support. It wa...
Created by
doug_counsil
in Small Business Routers
10-09-2012
10-09-2012
Oh, our SA540 has been running for four days now and it is at 80% memory
usage. We deployed the 2.2....
Created by
doug_counsil
in Small Business Routers
10-09-2012
10-09-2012
We use an SA540 as our gateway/VPN router and have a 24-port Netgear
switch connected to it. We have...
Created by
doug_counsil
in Small Business Routers
10-08-2012
10-08-2012
We deployed Beta firmware version 2.2.0.7 this weekend. Verisign VIP has
been fixed in this release....
10-04-2012
Peter,This really needs to be addressed. As I mentioned above we are
using ProtectLink Web and IPS a...
Created by
doug_counsil
in Small Business Routers
10-02-2012
10-02-2012
Here is what we used to determine what license to buy. FYI, we have an
SA540 and we purchased
L-PL-W...
Public Statistics
| Date Registered | 10-22-2011 06:24 PM |
| Date Last Visited | 08-24-2018 02:02 AM |
| Total Messages Posted | 227 |
| Total Helpful Votes Received | 10 |
Awards
Community Spotlight Award
Small Business February 2012
