Network Security

Is it possible to setup a site to site vpn with a pix501 when one site has has a dynamically assigned external IP? The pix is running verion 6.3, is there any other way around this that doesnt involve changing the config everytime the IP address cha...

All,I've noticed that I can't ping a public device (on my block) from the vpn. The vpn is NOT my firewall, but another ASA (5520). The inside interface on the ASA is on my private side. From a host on the lan and not on vpn, I can ping this device. T...

Hi, I'm seeing a lot of "DENIED LAND ATTACK" messages coming from a PIX 515 v.6.3 on my CS-MARS console. I'm not a PIX expert, but couldn't spot anything.It must have something to do with the NAT (Internet searches have pointed my to such things as D...

I have a Pix515 and was wondering if there is an easy way to email administratos when an inspect rule is violated. For example one of my ESMTP rules was violated and the following was logged in syslog:%PIX-4-108004: ESMTP Classification: Dropped con...

Hi,Can anyone tell me if/how to generate/install a Certificate from our internal windows based certificate authority.We have redundant CAM and CAS and need to deploy to a production environment but the only certificate is the default perfigo that the...

Dears,    i connected new branch through DMZ "new" on PIX as follow.i reached all LAN but i can't get Internet although i can resolve from local DNS.attached PIX conf and HQ routernew dmz is "new" and new subnet is 1.1.1.1

Hi,Could the use of sub-interfaces on the DMZ of a FW prevent servers within the same DMZ from communicating at application level? Servers on same subnet were not able to telnet to their application port.

All,I have a 5550 that is in production. I've noticed that the only url logging that I'm getting is from the outside in, but not hosts on the inside out. I have my inspects under my global policy, so is there something else that should be done? I hav...

Hello,I currently have two ASA 5510 sec plus versions and one AT&T MIS router with one interface and 3 T1 lines in.I would like know some suggestions on the best way to use both ASA's on a single wire connection. My idea is to split our VPN traffic (...

I am trying to connect my cisco software vpn client (latest version)from home, behind an ASA5505(v8.2), to my work VPN hosted by a PIX515(v7.2).(word diagram)client->ASA5505->internet->PIX515I've attached both logs. The ASA and the PIX. The 515 is co...

I have set up a ipsec/ike vpn on my cisco pix ( 515E), ASDM version is 5.2(3), PIX version is 7.2(1) and enable IPSec over NAT-TWhen the VPN connection authenticate the user via TACAC+, it works great...however, now I try to set it up so that it will...

PIX 501 connected to a residential cable modem. Speedtests are giving me 3mbit down. When I plug a machine into the cable modem I am getting 10-12mbit.Posting pertinent info:interface ethernet0 autointerface ethernet1 100fullnameif ethernet0 outside ...

Is it good to install CSA on a Cisco LMS server?If yes, is there any downloadables policies from cisco about CiscoWorks LMS?Thank you

Dear All,I have ASA 5520 and AIP-SSM20 withASA Version : Version 8.0(4) AIP-SSM20 version: 6.2(1)E3Signature Definition: Signature Update S365.0 2008-10-31 Virus Update V1.4 ...