Other Security Subjects

Hi all,I have to configure a l2tp without IPSec link between two sites. The scenario looks like:PC1 --- LAC --- LNS --- PC2 All links are on an Ethernet network.The cisco routers are from 800 Series (877).Each interface can ping any other interface.T...

I have a Router( 2 WAN ) to connect to 2 Routers (each a WAN) which are all Static IPs for VPN .How to configure ?Anyone can help me !Thanks!

My current setup is as followsASA 5510E0/0 INTERNETSecurity Level 0E0/1 WAN (connected to Branch offices on MPLS network)Security Level 100E/2 LAN Security Level 100If i create PAT using internet interface IP for all traffic originiating from LAN, th...

Hi!I have a PIX515E that reboots constantly (2 or 3 times a day) and i think it is because it's reaching its packet processing performance. Is this normal? How do i monitor this problem?Thanks nad best regards,JP

Hi, I have to configure 2 ASA5520 in a hight-avaibility setup for voice and data. I have some questions: in the multi-context mode can I apply QOS on logical interface ? Does somebody have an example config using:2 context (for load balancing) and 4 ...

Who can tell me why my configuration does not work.

I have 2 5520's in active standby mode which I upgraded the OS's on from 7.0 >7.2. I upgraded the failover unit first and when it came back it told me it couldn't talk to peer. Which I assumed was normal until I upgraded the other 1. After upgrading ...

I'm running CME4.0 & IOS 12.4(9)T on a 2801. I've configured the 'new' zone-based firewall and I'm using this instead of the old 'ip inspect' lines and traditional CBAC config.Currently, if I have the voice interface on the router in a zone and inspe...

I have some users that keep reporting the following rootkit\WINDOWS\system32\drivers\KProcDef.sys' is used by entries in the System syscall table. The specified action was taken to set detected rootkit as UntrustedI have created an exception, both ma...

Hi I have a little pb.I must configure the pix for my mail server.In my inside i have the exchange server(192.168.38.203) 2003 and in my DMZ I have the smtp relay(192.168.40.10) who it authorized to send mail.the externe address of the mail server i...

I have successfully configured ftp on the default port with an inbound acl for a specified range of ports for passive ftp. So the acl look like thispermit tcp any any eq 21 permit tcp any gt 1023 any range 61000 62500 i then tried to change the ftp...

I have an existing 'firewall vlan-group 1' with 11 vlan's associated to it.I now want to add vlan 891 to that vlan-group 1 so that I can create a new FWSM interface.Output:router-with-fwsm(config)#firewall vlan-group 1 501,803,852,855,857,873-875,88...

About the complete config ,please see the attachments: When I ping the host(168.1.12.156) with the client (168.2.2.209),an error is reported.but I can telnet the host (168.1.12.156)with the client (168.2.2.209). please help me! 168.2.2.209(client)---...

show version:pix525primary# show versionCisco PIX Security Appliance Software Version 7.0(4) Compiled on Thu 13-Oct-05 21:43 by buildersSystem image file is "flash:/image.bin"Config file at boot was "startup-config"pix525primary up 4 days 14 hoursHar...