Network Security

I've attached a clean copy of my config.I've used the 172.x.x.x and 192.x.x.x to limit visibility.Im trying to allow typical traffic form inside network to the DMZ, traffic from the Web sites to the DMZ, and Traffic out of the DMZ to both Internal an...

I'm trying to setup a smtp relay server in a DMZ and am having trouble figuring out what I need to do to allow it to relay mail to the inside. The mail relay will be 10.0.0.2 and the Exchange server on the inside is 192.168.100.3. I've got traffic ge...

We use our FWSM as our exterior/interior firewall. We would now like to redesign the newtrok and make the FWSM as interior only and the ASA as our exterior handling all inbound traffic from the public. Could anyone shed some light on the does and don...

PIX 515e with 8.0(4) IOS /24 network configured from INSIDE network and another 2 interfaces or configured. From INSIDE network i am able to establish connection only from some of the PCs and other PCs or not connecting this is intermident sonme PCs ...

I'm trying toget a FWSM working on a 6513 chassis running IOS. The FWSM is running 4.0(5). I'm using the MSFC behind the FWSM model. I created a SVI and presented it to the firewall as the inside interface. I created a VLAN on the 6513 and presented ...

Hi All, I have an ASA 5505 with a very basic configuration (trying to get the transparent mode to work). The configuration is like this: #########################################firewall transparent!interface Vlan1 nameif OUTSIDE security-level 0!int...

hi, how can i do intervlan routing in asa 5505.i know to do it in the asa 5510 like: interfaz e0.101 etc...but the asa 5505 dont have the subinterface...

Hi,I have users behind the firewall and need to access telnet session to the xtrader.prudential.com port 10200.we have DHCP so user IP changes and cannot configure user on static IP, what is the secure way to allow this on Cisco ASA 5510LAN IP segmen...

Hi All, I have an ASA that has an OUTSIDE interface connected to the Internet, and an INSIDE interface connected to my LAN. I enter the following commands on the ASA: access-list 105 extended deny icmp any anyclass-map ICMP match access-list 105polic...

Hello, Could I have some help in placing CAS and CAM servers in my existing topology :).Indeed I want to verify the conformity of Remote users(Connected Via VPN) to my inside servers by NAC, but I have some difficult in placing them.Is it possible to...

Hi,I have configured the ASA5510,configured for the IPSec Remote Access.Now in the remote PC I have loaded and configured the Cisco VPN client and configured also.Now i am getting connected to the mai site through teh IPSec VPN,and the remote PC also...

Hi!I'm not sure I ran the correct acl permit statements to enable https on the Cisco PIX 506E. I'm testing a proxy server which is connected to the Cisco PIX 506E. From a browser, I'm able to successfully view web pages, however, for all https protoc...

Hi Guys ,When I try reload an pix 515E , appear the follow error :pix#reloadpix#Currently writing image. Cannot reload.Anybody know this error ? Thanks Jorge

Hi. Is it true that i would need both an acl allowing packets from a lower security pix interface and a static nat in order to allow ip traffic to flow from a lower security interface to a higher security interface. The reason i am asking is that i a...