Network Security

I currently have a couple public servers on our internal network and i'm using the new Public Server option in ASA 8.2. What i have done is created a new interface on my asa called DMZ with sub interfaces in addtion to my current Inside and Outside. ...

Hi GuysAttached diagram represent my planned lab setup in which VLAN 80 will be the outside interface configured with Public IPs. (2.2.2.0/28). 2.2.2.1 will be the VIP (HSRP) ip of the router interface and 2.2.2.2 & .3 will be configured on the route...

All,I have a Cisco ASA 5510 with an IPS module in it. When trying to connect to this unit with ASDM on port 8443 I get an error "Certification Validation Error" and on the popup it is asking for the password. I put in the enable password and then it ...

CISCO Expert,right now!my polycom video unit is behind ASA 5510(Version 7.2(4) )and i just use static command to binding this unit to a global address,But I found that the POLYCOM Video unit not work with another POLYCOM device to establish normal d...

I'm running code 8.2(1) on both devices I can confirm that the problem is reproducible I can restore telnet and ssh access by removing and re-adding the relevant lines in in the config (via the ADSM CLI interface)e.g.: no telnet <subnet> <mask> INSID...

Hi Guys,I am confused about the use of the static command on the PIX. Let says you have the following command on the pix:static (inside,Smtp_DMZ) 10.150.243.243 10.150.250.10 netmask 255.255.255.255 What does it meanDoes it mean anything from inside ...

Hi Experts,I want to configure NAC appliance in INBAND-CENTRAL DEPLOYMENT-REAL IP GATEWAY.In this scenario, my clients are in different VLANs say 2 & 3. To all my clients the default gateway should be the IP Address of NAC. Correct?Where I will confi...

Do I need two statements to disable nat between the inside and dmz networks, one for each interface?

Hi,I've migrated from cisco 1721 to 1841.This router has 2 adsl wics(1wic 1hwic) and one lan interface with 2 lan addess configured. Behind the router is a firewall.See the attached file.This firewall enables a tunnel, because of this there is no vp...

What happen to the running config of the pix if I used the password recovery tool? Will the current config stay saved?Please advise

I have an ASA 5505 with a T1 (outside, 1.1.1.1) as the primary route, then a DSL line (backup, 2.2.2.2) as secondary, all with LAN (inside, 192.168.1.1).Right now it successfully injects the backup route if the outside goes down, then switches back o...

Hi all,I'm using a 877 router with IOS firewall (c870-advipservicesk9-mz.124-6.T10), and would like to translate all web traffic destinations (80, 8080) to a fixed destination IP address and TCP port to go out the internet link interface.ie. if a LAN...

Hi,I'm running 7.2 on a pix 515e restricted licence.The firewall is set to transparent mode.Licencing states the followingLicensed features for this platform:Maximum Physical Interfaces : 3 Maximum VLANs : 10 Inside Hosts...