Network Security

HiI have multiple PIXs, all with version 6.3(3) or 6.3(5)I need to upgrade them to a newer version, which one is more recommended to go for, 7.2(4) or 8.0(4)Regards,

hi halijenn / experts1) A firewall is configured in active-standby mode and i want to configure the same in active-active failover .Hence wanted to know if we can restore the configs present in the active -standby mode (which will get lost due to the...

Hi,My Local Subnet is  192.168.1.0/24 & 192.168.3.0/24. remote end also having same subnet.We need to do Site to Site VPN with these detail:My Public ip is 194.a.b.193 and Remote end peer IP is 100.a.b.19 Remote end natted IP is (100.a.c.198)Query:1....

access-list IDENT-STATIC extended permit ip object-group X object-group Yglobal (outside) 9 x.x.x.xnat (inside) 9 x.x.x.x 255.255.255.0 dnsstatic (inside,outside) x.x.x.0  access-list IDENT-STATICI have the following configuration above which works f...

Hi ,Can CAM/CAS be deployed in HA over WAN?. CAM1/CAS1 in DC1 and CAM2/CAS2 in DC2.Thanks all

After running the  program does not display one of the switch on LAN TOPOLOGY while  it is displayed in the tab menu ALL DEVICE (DEVICE SUMMARY). At the same time that  they all have the same SNMP configuration.

Hi Experts,I have a requirement to form IPsec tunnel between PIX and advertise my internal networks over the tunnel.I have two sites site A internal : 10.1.0.0/16site B internal : 10.0.0.0/8My question is if both site fall under the same range how co...

I am trying to get my two IDSM's to use NTP from my Core switch and keep getting the following error. /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:...

I need suggestions on how to design an ASA 5520 Active/Standby solution. Current configuration:T1 coming in from ISP to patch panel (Disaster Recovery site that also hosts our webservers)T1 -> ASA -> L3 Switches -> ServersProposed configuration:T1 co...

I would like to intercept all http and https traffic at the external interface on an ASA 5510 and forward it to a single server on the internal interface.  I thought I could do this with static entries, but I seem to be able to only do 1 entry per se...

On of our customers is asking us to set up a port forward from port 587 to port 26 because his client uses verizion for their mail server. What is the best way to set this up?