Hello --Is there a best practice doc that explains how best to deploy NAC? Also, is it possible to deploy the NAC agent remotely?Please let me know.Thanks,Ohamien
Hi,I have some IPS sensors ( IDSM, NM-CIDS, appliances), how can get one license for all devices to manage them fro Cisco security manager 3.1, also which is better managing them from CSM3.1 or VMS2.3ThanxNa?am
We have a MARS appliance and we have syslog setup on our ASA to send to it. For hosts that we have a name created in the ASA (Using Names command) it puts the name in the syslog message. Is there a way to have the syslog send the IP address instead...
Hi Netpros,This is my situation .. it is regarding to Webvpn access using the Cisco SSL VPN client.No rocket science .. I only need to provide full tunnel to some users and split tunneling to others (I know you can use the Cisco VPN client but th...
Hi all,I am running PIX 515e in a failover environment. The PIX has 128MB memory and currently it is using 113MB of the momory. Is that normal? How can I check where it is using this much memory? What is the maximum it can go without crashing?Thanks.
I have read the following definition a couple times:Transparent mode, the FWSM acts like a "bump in the wire," or a "stealth firewall," and is not a router hop. What I understand with the previous sentence is that: The FWSM connects the same network ...
We have a CSA Test server that we make lots of changes to on an ongoing basis. We'd like to know the recommended way to wipe out all of our changes and restore an original policy configuration. We'd also like to be able to import the policies fr...
Hi folks.I've searched through the online docs, but can't find a definitive answer to the following question:Can I upgrade the memory on a 5510 or 5520? I'm specifically referring to RAM, not to the flash/compact flash. One of my ASA's is only at 9...
I am trying to configure an ASA5510 (v7.12) to allow an inbound connection over TCP port 9000. I have a web server on the inside that is listening on port 9000 (http://192.168.1.1:9000)I have setup a static NAT:static (inside,outside) 1.2.3.4 192.168...
Hi,If I use 2 asa 5510 with HA in mode A/A or A/P Is it possible in A/A mode to use one IPS module, except for security problem ?Or is it preferable to use asa as A/P.Regards
I have set up a VPN to a Watchguard Firebox. I thought it was a relatively easy build but now whenever the SA timeout occurs (8 hours), the VPN tunnel stays down. When I do a sh cry it appears to fail on the key exchange. Once, the remote site tech ...
