Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have an ASA 5510 appliance running 7.2 (ASDM 5.2) terminating Cisco VPN Client 4.8 users. Everything works, meaning the Client can access corporate resources. However, due to "split-tunneling" being disabled (per corporate security policy) I will n...
I have a 4215 and my requirements are to sniff on four different segments of my network.Question:* Do I need to add a 4-FE card to fulfill this requirement?* Or, can I configure the SPAN ports on my switches and route the traffic out to a different p...
Hello,I have the following show monitor output:4506-a>show monitor Session 1 --------- Type : Local Session Source VLANs : Both : 40 Destination Ports : Fa3/4 4506-b>show monitor Session 1 --------- Type : Local Session Source VLANs : Both : 40 Desti...
Does anyone know if there is a limit to the number of active sessions a VPN Client user can have? If so, is this value configurable, and how?I have VPN Clients running ver4, and a Cisco PIX firewall terminating/authenticating their sessions with ver6...
VPN Client verHow do I restrict access to VPN clients terminating on a PIX firewall. PIX has multiple subnets, and I would like certain users access to specific hosts.
I hate the PDM. And quite frankly, I don't even know what it looks like. I can't blame you for using the PDM if you've never worked with a PIX in the past. However, there is probably a great likelihood that you have applied the wrong information via ...
You most likely forgot to apply the 'nat 0' acl to the inside interface.Try this, 'nat (inside) 0 access-list inside_outbound_nat0_acl'.You really should paste the entire config of both firewalls. Your problem could also be on the other side.
Modify your 'icmp' rule on the PIX firewall to allow your router R2 to ping the outside intf of your firewall:icmp permit outsideOpen up your access-list to allow R2 to ping R1 and your PCs. Apply the entire network behind R1 as the destination. App...
