Network Security

Hi,Voice application and another trade application running on port 10200 doesnt seems to work behind firewall((INTERNET))--[Router]---[Firewall]---[Core]the firewall is used for hosting Web server & site to site vpn ( natting public ip with private )...

Hi,Currently I am doing migration for a customer, I am deploying/modifying two ASAs in parallel (for simplicity: two ASAa have same vlans for inside and outside interfecs, respectively). The inside interfaces are connected to two core switches 6513 (...

We need to create a L2L tunnel with a provider but their standard is that they require us to PAT our internal segments\hosts (AKA "interesting traffic") to a public address. By that they mean an address in the same segment as the OUTSIDE interface of...

Hi,I have a situation with 2 PIX 525 running PIX OS 6.3(3) int Active/standby mode. The Primary has UR license, while the secondary FO license.The Primary is failing and the failover has taken over. I have 2 questions:- How can the license be moved t...

We have a site to site VPN which works perfectly ok. The host IP on our end is 192.168.35.10\32 which our vendor is accessing over the VPN tunnel.. no issues there.Recently we had to modify the IP address of the host to 192.168.45.10\32 and instead o...

Hi all,we need to configure proxy functionality in our PIX firewall for our clients.What we expect is to authenticate our incoming client's requests not directly in web server placed behind firewall but use firewall itself to send requests to authent...

We're considering replacing a pair of PIX 525s and a pair of VPN 3005s with a single pair of ASA 5520s. I'm looking at the configuration changes that will be needed. The PIX side seems pretty easy... I've run the PIX-to-ASA conversion utility on the ...

Is there a way to get, from the syslog messages, which ACE of an ACL triggered a deny?frex, I have an object, Blocked_addresses, which contains 30 addresses. This is used in a deny in an ACL. This element of the ACL shows a bunch of hits, but no deta...

Hello All,I have noticed for 2 weeks that I have an 85-89 % usage in my ASA 5510.I have checked teh logs and nothing odd..the number of concurent connections ar about 500-600.What can I do to decrese teh memnory usage?ThxVlad

I need to have two external ip addresses configured on the ASA Outside interface. Both ip addresses will be on the same subnet and one will have VPNs terminated on it. I know it would be easier to just terminate everything on a single IP, but I have ...

What is the best way to see if the PIX throughput is being maxed out?..

Hello I have a PIX 515E on 6.3(4) version with internal network 192.168.20.1/24. This is connected to switch and workstations on the switch with GW 192.168.20.1I also have another internet network 172.24.10.x which is connected via the main switch to...

Is there a tool to convert IOS ACL to FWSM format ?i.e. conversion of wildcard masks to appropriate subnet mask

Morning peeps, Does anyone have any good resources for routers using Zone Based Firewalls and applying QoS policies to the IP interfaces of such?Or is it simply the same as a router using Classic IOS Firewalls?RegardsPaul