Network Security

We need to create a L2L tunnel with a provider but their standard is that they require us to PAT our internal segments\hosts (AKA "interesting traffic") to a public address. By that they mean an address in the same segment as the OUTSIDE interface o...

Hi,I have a situation with 2 PIX 525 running PIX OS 6.3(3) int Active/standby mode. The Primary has UR license, while the secondary FO license.The Primary is failing and the failover has taken over. I have 2 questions:- How can the license be moved t...

We have a site to site VPN which works perfectly ok. The host IP on our end is 192.168.35.10\32 which our vendor is accessing over the VPN tunnel.. no issues there.Recently we had to modify the IP address of the host to 192.168.45.10\32 and instead ...

Hi all,we need to configure proxy functionality in our PIX firewall for our clients.What we expect is to authenticate our incoming client's requests not directly in web server placed behind firewall but use firewall itself to send requests to authent...

We're considering replacing a pair of PIX 525s and a pair of VPN 3005s with a single pair of ASA 5520s. I'm looking at the configuration changes that will be needed. The PIX side seems pretty easy... I've run the PIX-to-ASA conversion utility on the ...

Is there a way to get, from the syslog messages, which ACE of an ACL triggered a deny?frex, I have an object, Blocked_addresses, which contains 30 addresses. This is used in a deny in an ACL. This element of the ACL shows a bunch of hits, but no de...

Hello All,I have noticed for 2 weeks that I have an 85-89 % usage in my ASA 5510.I have checked teh logs and nothing odd..the number of concurent connections ar about 500-600.What can I do to decrese teh memnory usage?ThxVlad

I need to have two external ip addresses configured on the ASA Outside interface. Both ip addresses will be on the same subnet and one will have VPNs terminated on it. I know it would be easier to just terminate everything on a single IP, but I hav...

What is the best way to see if the PIX throughput is being maxed out?..

Hello I have a PIX 515E on 6.3(4) version with internal network 192.168.20.1/24. This is connected to switch and workstations on the switch with GW 192.168.20.1I also have another internet network 172.24.10.x which is connected via the main switch to...

Is there a tool to convert IOS ACL to FWSM format ?i.e. conversion of wildcard masks to appropriate subnet mask

Morning peeps, Does anyone have any good resources for routers using Zone Based Firewalls and applying QoS policies to the IP interfaces of such?Or is it simply the same as a router using Classic IOS Firewalls?RegardsPaul

HiIn my system VPN connectivity is running fine. VPN configure in my ASA 5520. Remote users access the VPN and work in LAN.But Today and before some of day suddenly useres can not connect in VPN , messeage promt " Secure VPN connection terminated by ...

Hi,we have 2 pix system with failover and standby fascility, now i would like to use astandby pix for other jup, but i coudlnt do any, because the worrning message allows supplied that "this pix is standby" , so i need to erase this fascilty to do my...