Network Security

Hello all,I have two ASA5510 with Base License, connected on dedicated link. So far I have a site to site VPN configured to encrypt the traffic between the two sites. Now, we want to implement VLANs at both sites and be able to transmit the VLAN info...

Dear All,I am configuring site to site VPN, I have one 2811 and one 1811 cisco routers,Please tell me by using this configuration do i need to dial ??? or it will connect automatically,,,from the router it pings its live ip but dont ping inside ether...

Is it possible to setup a site to site vpn with a pix501 when one site has has a dynamically assigned external IP? The pix is running verion 6.3, is there any other way around this that doesnt involve changing the config everytime the IP address cha...

All,I've noticed that I can't ping a public device (on my block) from the vpn. The vpn is NOT my firewall, but another ASA (5520). The inside interface on the ASA is on my private side. From a host on the lan and not on vpn, I can ping this device. T...

Hi, I'm seeing a lot of "DENIED LAND ATTACK" messages coming from a PIX 515 v.6.3 on my CS-MARS console. I'm not a PIX expert, but couldn't spot anything.It must have something to do with the NAT (Internet searches have pointed my to such things as D...

I have a Pix515 and was wondering if there is an easy way to email administratos when an inspect rule is violated. For example one of my ESMTP rules was violated and the following was logged in syslog:%PIX-4-108004: ESMTP Classification: Dropped con...

Hi,Can anyone tell me if/how to generate/install a Certificate from our internal windows based certificate authority.We have redundant CAM and CAS and need to deploy to a production environment but the only certificate is the default perfigo that the...

Dears,    i connected new branch through DMZ "new" on PIX as follow.i reached all LAN but i can't get Internet although i can resolve from local DNS.attached PIX conf and HQ routernew dmz is "new" and new subnet is 1.1.1.1

Hi,Could the use of sub-interfaces on the DMZ of a FW prevent servers within the same DMZ from communicating at application level? Servers on same subnet were not able to telnet to their application port.

All,I have a 5550 that is in production. I've noticed that the only url logging that I'm getting is from the outside in, but not hosts on the inside out. I have my inspects under my global policy, so is there something else that should be done? I hav...

Hello,I currently have two ASA 5510 sec plus versions and one AT&T MIS router with one interface and 3 T1 lines in.I would like know some suggestions on the best way to use both ASA's on a single wire connection. My idea is to split our VPN traffic (...

I am trying to connect my cisco software vpn client (latest version)from home, behind an ASA5505(v8.2), to my work VPN hosted by a PIX515(v7.2).(word diagram)client->ASA5505->internet->PIX515I've attached both logs. The ASA and the PIX. The 515 is co...

I have set up a ipsec/ike vpn on my cisco pix ( 515E), ASDM version is 5.2(3), PIX version is 7.2(1) and enable IPSec over NAT-TWhen the VPN connection authenticate the user via TACAC+, it works great...however, now I try to set it up so that it will...