Network Security

I have an ASA5510 running 8.2.1 code for site-2-site VPN.I want to establish VPN between this ASA5510 and a remote peer which is a Cisco 1841 which has an external IP address of 1.2.3.4I would like to be to allow ONLY IP address 1.2.3.4 to establish ...

I have an old Cisco pix 515r v6.3I need to permit a range of IP's to our mail server on port 25 (only this range should be able to access PORT 24 on the mail server). I'm not very familiar with the PIX, so any help with this would be appreciated. Wha...

Hello,i have upgraded a cisco pix 515E, from version 6.3.5 to 8.0.4.the steps i followed was: 1.- upgrade from 6.3.5 to 7.0.82.- upgrade from 7.0.8 to 7.2.43.- upgrade from 7.2.4 to 8.0.4in each step i make testings and was ok.But now im having a log...

Hi all, I'm trying to define if implementing policy based destination NAT on FWSM is possible. I found several examples of policy NAT but it seems that it only applies to source. I did tests on a router and I am quite sure it is not possible, but now...

we r using ASA5510 for internet link.we activated basic threat detection.to access internet users must use one BlueCoat Proxy.in ASA i allowed all IP traffic coming from the proxy.in firewall dashboard, under Top 10 protected servers under sync attac...

I have a lab setup with a 1721 connected to the Internet. I have enabled ip inspection with several engines including http and https, on the outside interface out bound. I also have an access list on the outside interface blocking inbound traffic. ...

Hi,A company is switching the ISP so PIX515E IP needs to be changed. I found that the DMZ interface is using a public IP and a web sever is using a puplic IP as well. Please see the configuration below:...name 206.x.x.211 DMZ-WEB...interface ethernet...

HelloCan incoming and outgoing SMTP traffic for internet be restricted. SMTP Server is in DMZ.Incoming smtp traffic host will be differentOutgoing smtp trafic host will be DMZServer 192.168.1.5Restricting Bandwidth = 1MB

We have an ASA in a colo environment that has a full 100Mbps Internet connection. we are billed at a 95th percentile rate and want to limit ourselves to 34Mbps. I believe this can be done by traffic shaping. I want all traffic affected by this. Our i...

We require assistance in configuring site2site vpn (Juniper-NS5GT-ADSL-WLAN in a branch office with ADSL connection (dynamic IP) and the pix 515e OS version 8.0 in the head office with a fixed IP

we get following error on firewall when access is checked.portmap translation creation failed for tcp src local: 10.70.10.2/13222 dst subs3:10.90.0.1/500110.70 is our local segment & 10.90 is one of our subsidary located outside of the region.Pls adv...

Hi,We're using Citrix 4.5 on MPLS network with 170 branch offices for one big centralized business application. We're are already using QoS to differentiate Citrix packet traffic (ICA and CGP). We're facing some problems when keyboard/screen refresh ...

Dear experts!I have used to run AIP-SSM-20 module on ASA.I`m wondering that it really works to inspection and bloking the packet.I have not found the log message for inspecion and bloking log message anywhere on the ASDM menu.SO I really want to see ...

HelloDifferent application needs different ports to pass traffic from inside to outside with ASA placed inbetween.Instead of allowing all ports ; how to streamline with needed ports. Struggling to get it working. LANUSERS_____switch____ASA_____INTERN...