Network Security

I have a strange problem when setting up an ipsec-tunnel between my ASA 5520 and a remote peer. The tunnel comes up fine and when I am initiating traffic from my side everything is working fine, I can log into SAP and worh in the system. But if I try...

I have setup a capture on our ASA. We are trying to connect across a VPN tunnel wiht a certain app and it wont connect. We can telnet and SSH to the device across the tunnel OK. It is just this one app that wont start.I have a capture set up on the i...

I need to setup a hairpin on my PIX running 7.2 PIX-OS. I have the configuration set but this isn't working. I need to do this because we are moving a critial host (172.16.100.62) to another network in another facility and listening on a new IP addre...

Hi,I have a 1841 cisco router with ports and ip remote access to locally connected 2 firewalls.Those firewalls stablish 2 vpn tunnels. 1 is up an the other one no.This warning is show:packet has invalid spi for dest address=213.171.249.86, prot=50 sp...

I am trying to create an access rule in th e DMZ on a PIX 515E to one server in the DMZ (192.168.30.10) from two different IPs:74.125.45.8374.125.45.17From these two IPs I want to permit https & ping traffic only. This is where I'm running into a pro...

We have a new ASA5505 with the Security Plus Unlimited License. We are trying to setup two web servers in our DMZ with PUBLIC IP addresses (as required by our application). These machines CANNOT be NAT'ed in the DMZ. Network Space (IP's have been san...

Dear ALL,I have a PIX 515E 6.3 , a ftp server on windows 2000. A customer of me, sometimes esperinces ftp sessions hung without any particular reason. In the PIX's log I can find this error: Deny tcp src inside:192.168.0.239/20 dst outside: a.b.c.d/2...

Hi,I am just trying to setup the email notification for failed ssh attempts and/or https request to the asdm.Do I have to create an event list or can I handle it with syslog ids?!?Every help is appreciated!ThxTom

What's the best way to do something like HSRP (I need my users to point to a redundant virtual address like in HSRP) with two 6500s with the FWSM.I will have about 20 VLANs. I want the FWSM to be active/passive. Should I put the virtual IPs on the FW...

lately it was seen that whenever users login to our vpn via anyconnect ssl, they wouldnt get any dns issued(checked via ipconfig).The dns would appear as some public ip..possibly one from the ISP itself.Please suggest on possible causes and steps to ...

We were preiousl ale tdo this. Now when e try we get:"DM Launcher Version checking failed with java.net.SocketException: Software caused connection abort: recv failed". Any ideas, or more info?Thanks!Chuck

HiVia ASDM I can backup the complete configuration of my ASAs.Complete means, not only running-/startup-configuration, but certificates, customization, DAP, plug-in, translation-tables and so on.Two questions to you:1) Why can't I do that on ASAs wit...