We need to limit which users are allowed to surf the web and also track where they go.
We currently have an ASA5510 Firewall then a Microsoft ISA2004 server for Proxy and authentication by using Active Directory Groups.
1. What are you using?
2. Do you require users to be authenticated to surf...
We need to delegate our Helpdesk to have the rights to create an NDS account and a Groupwise account.
Can someone lead me to, or tell me what rights to assign the Group our Helpdesk users will be a member of so they can do this with minimal rights?
Thank you !
I can't seem to limit FTP to a User group. If I select "All Users" it works, but for All users. FTP will not work if I assign only a "FTP Group". Wassup with that?
Anyone else have a similar issue or know of what a fix is?
My goal is to only let a "Select" group of users be able to FTP.
DK
We need to improve security.
On Device Manager I noticed there is a place that looks like it may do what we want. (SNMP V3). But where/how do we turn on that feature on a 470 switch and where/how on a 8610?
Where is the user ID created on the 470 or 8610 that Device Manager will authenticate...
Please answer a question for me........
When the global command is used, and the NAT command, do the numbers have to match?
Example I have these cmds:
global (outside) 1 X.X.X.10
global (outside) 2 X.X.X.11
global (outside) 3 X.X.X.19
global (outside) 4 X.X.X.17
global (outside) 5 X.X.X.20...
On ISA 2006 what are the ramifications to changing the Inside Private IP address. I configured a test box and want to make it Live to replace an existing ISA2004 machine.
David
We are concidering the two following configuration with a PIX 515 and Microsoft ISA 2006 server, what do YOU feel is best? Option 1 or 2.
Option 1:
Internet -- PIX -- ISA -- Internal Network
(ISA in Back End Firewall mode)
Option 2:
Internet -- PIX --Internal Network -- ISA
(ISA in Single NIC...
We are implementing a new connection to the Internet.
We will be using ISA 2006 for Proxy and a PIX firewall.
We are concidering the two following configs, what do YOU feel is best? Option 1 or 2.
Option 1:
Internet -- PIX -- ISA -- Internal Network
(ISA in Back End Firewall mode)
Option 2...
What are the commands I need to do to a PIX515 to get it to let me connect with IE for management?
I thought the only need ones were:
http server enable
http 172.x.x.x 255.255.255.0 inside
isn't this all that is needed?
If not what else is?
David
Whoo Hoo I found the solution....
The Data rates were configured for "Best throughput"
This is a bad thing for 802.11-B on some required OFDM data rates. Setting at default works.
Thanks for the Help!
David
That is true the PDA's cannot get an IP address from the unprotected public wireless.
The Access point is configured to be b or g.
Both brands of PDA's are b only.
David
The Access point has 4 VLAN's configured on it. 3 are WEP one is Open. The Dell and Samsung PDA's both complain that they cannot get an IP address on this one public VLAN. Laptop's get an IP with no problem.
Thanks for the assistance.....
I set up a Cisco 1231 Wireless Access point. Laptops get a DHCP address but PDA's do not.
This shows the DHCP is correct since the laptops can get DHCP, so the issue must be with the way the PDA's grab a DHCP. Does anyone know why a PDA might not grap an address?
Yes i did try several PDA's...
The outside is Dynamic from Verizon DSL. The inside I set static and I also have the PIX giving DHCP to inside clients.
Can you post a sample config?
David
Can someone PLEASE! post a sample config where the outside address is from DHCP and the inside static.
We want several PC's to get out with NAT or PAT. I can't seem to get the right NAT and Global commands.
PIX-506
David
We are looking at potential Spyware solutions. One was CA Pest Patrol. but CA says that it is NOT Citrix compatible.
How is everyone else dealing with Spyware on the Citrix servers?
Please Fell free to give Pro/Con experiences.
Please sound off of how you manage spyware.
David
Sorry, seems Microsoft has a glitch.....
You have to have Power user or administrative rights to do this.
If anyone has worked this out PLEASE post a solution here.
Whoo Hooo Microsoft release a new Updated Article.
See:
http://support.microsoft.com/kb/914837/EN-US/
For Indiana Time Zone "Potential" Fixes.
Good Luck..
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.