Network Security

Hi Guys,I have setup my Cisco routers to have the following basic configuration:ip inspect name FIREWALL tcpip inspect name FIREWALL udpip inspect name FIREWALL icmp!interface Dialer1 ip inspect FIREWALL out ip access-group FIREWALL-ACL in!ip access-...

I am setting up a new ASA running 8.3 and I am having problems with configuring double NATs.Here is the thing I am trying to solve:Original PacketSRC: 1.1.1.1DST: 1.1.1.10After it hits the firewall and it comes out on the outside interface I want thi...

Hello,I have a Tandberg DPS 2000 that I was in the process of restoring to factory defaults remotely,  and I lost powerin the house and thus lost my connecton to the Tandberg.I have reconnected to the Tandberg, so the network settings are still in pl...

Hi,We have ASA 5580-40 with rel ver 8.1(2). During testing mcast, we found that if we do not configure IGMP static group or join group with specific mcast group ip addr, the mcast will not work, the client application can not join the specific mcast ...

We have a pix 501 through on which we have one pix to pix vpn up to a remote site(A). In case of its failure i would like to configure a redundant ipsec vpn with site B this again will be a pix to pix vpn.Can anyone suggest me the config how i can ac...

Our ISP has two routers onsite.  The primary router has a 40MB connection to the Internet and the secondary router as a 20MB connection to the Internet.  I am configuring our two 6509's with a FWSM in each so that the MSFC is inside and the FW is fac...

I'm trying to traverse from my inside private IP address (10.x.x.x) to my public IP address translation (172.16.x.x) in order to take advantage of the ACLs that are already applied on my outside interface.  For example:Host 10.0.0.1, translated to PA...

Hello,I'm using Netflow on our ISP's Cisco internet router.  It sends Netflow info to the outside interface of our ASA and I PAT UDP port 9996 (Netflow) to our Netflow server that sits on the inside of the ASA firewall.  the problem I have is I just ...

Hi,I would like to know how to NAT multiple webservers to one public IP on port basedi.e. i have 2 internet facing webservers (a.b.c.d & e.f.g.h) on the DMZ zone but have only one public IP (x.x.x.x). I want to access both these servers on the same p...

Hi there,Recently upgrade the two ASAs to 8.3 code. Besides all of the fixing up that had to be done and the few things I had to wrap my head around, all is good with the upgraded config. Now my problem is that any new rules I create throught the ASD...

HI,Have an issue with FWSM (4.1.3) and DHCP Relay.Where the DHCP request is being forwarded and the reply receieved but it is not getting to the Server (which is in continue request state) to obtain the IP Address.XXXXXXXXX/TC3inside# DHCPRA: relay b...

Hi. I have a 5510 authenticating successfully with a RADIUS server.  I'm using it for VPN authentication and it works great.  I would also like to do this for adminstrator access to the ASA.  When I turn it on though, anyone that can authenticate for...