Network Security

Hello,i have upgraded a cisco pix 515E, from version 6.3.5 to 8.0.4.the steps i followed was: 1.- upgrade from 6.3.5 to 7.0.82.- upgrade from 7.0.8 to 7.2.43.- upgrade from 7.2.4 to 8.0.4in each step i make testings and was ok.But now im having a log...

Hi all, I'm trying to define if implementing policy based destination NAT on FWSM is possible. I found several examples of policy NAT but it seems that it only applies to source. I did tests on a router and I am quite sure it is not possible, but now...

we r using ASA5510 for internet link.we activated basic threat detection.to access internet users must use one BlueCoat Proxy.in ASA i allowed all IP traffic coming from the proxy.in firewall dashboard, under Top 10 protected servers under sync attac...

I have a lab setup with a 1721 connected to the Internet. I have enabled ip inspection with several engines including http and https, on the outside interface out bound. I also have an access list on the outside interface blocking inbound traffic. It...

Hi,A company is switching the ISP so PIX515E IP needs to be changed. I found that the DMZ interface is using a public IP and a web sever is using a puplic IP as well. Please see the configuration below:...name 206.x.x.211 DMZ-WEB...interface ethernet...

HelloCan incoming and outgoing SMTP traffic for internet be restricted. SMTP Server is in DMZ.Incoming smtp traffic host will be differentOutgoing smtp trafic host will be DMZServer 192.168.1.5Restricting Bandwidth = 1MB

We have an ASA in a colo environment that has a full 100Mbps Internet connection. we are billed at a 95th percentile rate and want to limit ourselves to 34Mbps. I believe this can be done by traffic shaping. I want all traffic affected by this. Our i...

We require assistance in configuring site2site vpn (Juniper-NS5GT-ADSL-WLAN in a branch office with ADSL connection (dynamic IP) and the pix 515e OS version 8.0 in the head office with a fixed IP

we get following error on firewall when access is checked.portmap translation creation failed for tcp src local: 10.70.10.2/13222 dst subs3:10.90.0.1/500110.70 is our local segment & 10.90 is one of our subsidary located outside of the region.Pls adv...

Hi,We're using Citrix 4.5 on MPLS network with 170 branch offices for one big centralized business application. We're are already using QoS to differentiate Citrix packet traffic (ICA and CGP). We're facing some problems when keyboard/screen refresh ...

Dear experts!I have used to run AIP-SSM-20 module on ASA.I`m wondering that it really works to inspection and bloking the packet.I have not found the log message for inspecion and bloking log message anywhere on the ASDM menu.SO I really want to see ...

HelloDifferent application needs different ports to pass traffic from inside to outside with ASA placed inbetween.Instead of allowing all ports ; how to streamline with needed ports. Struggling to get it working. LANUSERS_____switch____ASA_____INTERN...

We are having an issue with video calls dropping after 2 hours. This involves the Polycom VSX and our 525 PIX 7.2.1, Here are bits of the config, any suggestions would be apprrciated. timeout xlate 2:00:00timeout conn 1:00:00 half-closed 0:30:00 udp ...

Hello,I have a question regarding dynamic policy NAT and IPSEC Site2Site connections.Kinda hard to explain, but I will do my best.The current setup is - two sites, site A (ASA 5520) and site B (ASA5505). Botw with FW 8.2- Both sites are connected via...

Is this possible after enabling Security Context on ASA 5510 .Requirement: Will be able to allow Dedicatedly Vlan 5 Traffic (In Red Line) to use ISP-2 to communicate outer world and Vise versa if I enable Security Context in ASA 5510Will be able to a...