Network Security

We picked up a strange problem on the FWSM . DNS Queries sent to UDP 53 for the DNS services hosted on a Linux server failed to work .DNS INSPECT on the Firewalls had to be turned off & DNS tests were fired again to get this working .  Is this a know...

I know the PIX-515 has been off support since 2007, but there is, still, one integrated into our network.  At times, it stops forwarding or responding to PAT traffic directed to an internal server on port 80 (www).  Nothing else on the device is impa...

helloi'm working on a (long) acl and have started looking at putting multiple ports on the same linee.g.instead of:ip access-list extended test3permit tcp any host 10.10.10.1 eq 80permit tcp any host 10.10.10.1 eq 443i'd use:ip access-list extended t...

Hi,i have configured the email alerts on asa 5520. but am not getting the email alerts on my maid id. Please let me know what i am missing. below is the configuration.IS there any forwarding required in SMTP server..I want some results on mail e.g (w...

My outside interface IP is blocked by ISP in one of the client locations , can I have them use the VPN client to send IKE request to a secondary IP on the outside interface (on the same ISP allocated LAN range).I have ASA 5540 (8.0-3)

Hello all,I am having difficulty trouble shooting a problem I am having troubles with a firewall rule. I have setup a static Nat rule to a single host (10.0.0.2) in my network to allow rdp, when I run packet tracker the rule works, however when I phy...

Hi there.I hope that somebody can give me a clue of this. I was looking for information for ASA OS like Cisco Feature Navigator provide it. I need to know for example which version are either ED, LD, GD or DF.Thanks in advanced for the information!Re...

HelloIs there a way to run a report from the ASDM to focus on VPN peer or ACL's?

Hi,One of my VPN configured in ASA is giving me an intermittent problem. Intermittently my connection is going down. When i checked, phase-1 SA is through but phase-2 SA is not getting up.For a while it will not work, after a random interval it will ...

Hello, I'm trying to configure a pix 525 with 6.2 firmware version, usually I would try this:mac access-list extended (name)permit host (mac) anyint f0/0mac access-group (name) inbut this pix doesn't have mac commands. Can someone help me?ThanksMario...

Has anyone seen something like this before - so I know I m not crazy. Under Firewall/Objects/Newtork Objects/Groups there is an option to find/display all objects that are "Not Used". when i check this however, most objects are actually used in eithe...

Hi,Strange request but is there somewhere I can plug our serial numbers in to check the correct model type and identification ?RegardsScott.  

Hi Guys,I need to know if there is a way to checl the IPs which are blocked to pass through the ASA 5520 firewall.this firewall is doing the NAT for 3 IPs for me192.168.20.21 -----NAT---->10.10.20.21192.168.20.22 -----NAT---->10.10.20.22192.168.20.23...

Hi all,Can anyone guide me, from where I can get Clientless SSL Webvpn plugins(like RDP, vnc) to practise on GNS3?

Hi, We have a local syslog server which listens on UDP 514 port. As many UDP frames has been cut I've done some investigation and found dropped packets (action requested by IPS). This was 1206.0 signature which is "IP Fragmant Too Small". I have crea...