Network Security

Greetings.In a project with a Pix 520 Firewall.  Topology is router to hub (inside) to firewall (inside port) - xp server connected to the hub.  Dmz to dmz of firewall (outside).  Hub (outside) to linux boxes.Can ping from server to linux boxes, but ...

Hello,    If I want to allow a VPN connected users to access to internet, what commands do i need to use.I want them to access the internet thru the vpn when connected, right now when they connect they cannot accessthe outside network on the inside n...

Hello,   I have a website that is hosted by our company, but when the staff goes to the outside address of th website it gets denided by ACL thus page not found.3Feb 20 201211:25:23192.168.3.5752928our Extrenal IP80TCP access denied by ACL from 192.1...

My PC is finally on MSDTC.  First I had to put it on NAT.  Then I had to keep fixing Windows XP untill it went on MSDTC.  I used a processor and a switch to keep the network going as well, which went in my Tcom closet.  My question is now how do I us...

Hi Everyone,I have a Cisco ASA 5505 in our office. We are currently using Interface 0 for outside and 1 for inside. We only have 1 Vlan in our environment. We have two three switches behind the firewall. Today the uplink to Interface 1, to the firewa...

I decided to take the plunge and start learning a little about Cisco, the IOS, and firewall configurations.I purchased a Cisco Pix 525 used, defaulted with Cisco Pix Security Appliance Software Version 8.0(4), unlimited license.My plan was to work th...

HI friend,I want to kown if is posible install IOS 8.3(2) and asdm 6.3(1) in firewall 5505 wich has 512MB of RAM and 128MB of flash. I installed it but according to the cisco page it can´t. maybe could work bad ? i dont kown.could you helpe me with t...

Hi Guys,I am having issues getting  my Cisco IPS to automatically download and install signature updates from Cisco. I have Cisco 6513 which houses my IPS module. The Proxy and DNS settings are configured correctly in line with our IP address paramet...

Hi dears.my mail server at dmz zone and i want  static nat.i write access list which is dmz zone access to inside zone(as you know security level) and i also configurated proxy at dmz zone.i also write access list for proxy server.access-list access-...

Hello,Could you please verify this configuration:I have 2 inside networks:object network INSIDE_10.6subnet 10.6.0.0 255.255.0.0object network INSIDE_192.168subnet 192.168.0.0 255.255.255.0I grouped these 2 into 1 object-group:object-group network INS...

Hello,At our client I configured Split Tunneling on an ASA but somehow it doesn't seem to function.I have the feeling I'm missing something but I don't see what.Situation as followed:Network: 10.38.11.192 255.255.255.224group-policy VPNCLIENTS attrib...

We have activated plus license, but at Url filtering category nothing works. Categories are empty ('plus' becames 'minus' but nothing appears). Tried it on different PC's with Chrome, Mozilla, IE. Latest java is installed.

In Cisco IOS, I can get the ARP/IP table on the router with the following MIB:  .1.3.6.1.2.1.4.22.1.2For example:[root@lab-CentOS-3 ~]# /usr/bin/snmpwalk -v 2c -c Finra_lab 192.168.15.254 .1.3.6.1.2.1.4.22.1.2IP-MIB::ipNetToMediaPhysAddress.1.98.174....

Hi,I don't want to change the global UDP idle timeout for the entire firewall for obvious security reasons but I have to change timeout for a particular UDP port from a known source IP to another known destination IP. I tried using:object-group servi...