Network Security

I know my setup is ugly. I am double NAT'ing the pix as it sits behind my linksys router. So, the linksys gave the pix an IP via DHCP. I am able to browse to the machines behind the pix locally while connected to my network on the linksys, but unable...

Hi,I'm trying to query a mib for the asa to show me what IP peer is connected on a tunnel.When I do a mib walk on the 5510 8.2(1) none of the OID'S for these values show up, although they should be supported.Ie cikepeerentry or crasusername OIDs.I wo...

Hi, Can anyone tell me how to setup automatic VPN failover using 2 seperate ISP circuits. Eg, Our Local office has 2 different internet lines conneced to an ASA5510. we VPN from this office to all other remote locations. All traffic originates here. ...

I am experiencing a high amout of underrun packet drops for egress traffic out my inside interface on a ASA 5520 (avg 10 packet drops p/sec).  I am not completely clear on the understanding of underruns, but my understanding is that the harware is wo...

what other commands on the ASA, other than show interface, can show me some statistics about the interfaces? We have an external SNMP app that is reporting discards on our firewall interface. Show interface reveals noinput errors, CRC, frame, overrun...

Hi,One more question. What is the point of the static command given that you have the nat/global nat commands instead? In what scenarios would you use the static command and when would you use nat/global commands?ThanksDan

I need a VPN solution for multiple situatjions. Background: Simple LAN with unmanaged switches with single server 2008 running inventory application with about 20 users. I need to get a VPN solution to allow 2 things:1) Allow telecommuters to conne...

Hi all,Can someone remind me the restrictions of the DMZ on the base model?  Does it only allow you to restrict traffic from DMZ to LAN and not vice versa?Thanksps - anyone know where my netpro historical posts have gone - it's been a while since i l...

From the firewall perspective how can i determine the amount of TCP users that are hitting the firewall.Is there a command or debug that would allow me to see that.

Hello All,I recently purchased a Cisco ASA5505 (basic license) for use at home. I also just purchased Vonage for home phone & fax line usage.While reading the instructions, the Vonage hardware needs to be placed between the cable modem & my internal...

Hi All!!!I am running a PIX 515 failover pair running 6.3.5 and get the error message that follows:"No translation group found for tcp src lyontwp-secure:172.16.7.69/52955 dst inside:4.2.2.2/9100"I am trying to use NAT Exemption to bypass NAT entirel...

We have a PIX525 running 6.3(4). We are trying to get applications that run on dynamic UDP ports to work with out success. We have added all statements to our outside ACL but they dont seem to have any effect.