Network Security

Do not have a Pix at hand to test so I willask with this given scenario:1- What ports must be open on the Pix inorder to allow ftp over SSL to work properly?2- Is it possible to allow ONLY passive FTP through the Pix firewall in this given scenario?T...

Following is a lab topology:I cannot ping from interent(LAB) router to the inside interface of pix as well as lan.ALso cannot ping outside interface of Pix from lan but can ping the system on internet(LAB) .Can anyone help .Thanks in advance. system ...

We just started using the ASA 5510 with the CSC module. We have a development Webserver in DMZ. From within the LAN we see a lot of broken images when accessing web pages on the development web server in the DMZ and Web pages outside our network. ...

Is there anyway to configure an ASA to make it possible for AnyConnect SSL clients to be able to traffic over IPSec tunnels to remote networks. The IPSec tunnels are configured on the outside interface, which is the same interface that the SSL client...

Hello, I need advice on how to setup DMVPN for the following scenario DataCenter#1 DataCenter#2 Branch-Office#1 Branch-Office#2 Branch-Office#3 DC#1 is connected to DC#2 via MPLS using BGP BO#1 is connected to DC#1 with GRE Tunnel over IPSEC (( Routi...

Hi Guys,I am having some problems with csa 6.0 and a software deployment tool called capainstaller, it resides on the client and picks up packages on some server shares and executes them from there, or copies it locally. We have added it to the class...

I am just wondering whether following Site to Site VPN configuration scenario will work.ASA--Internet RTR ---Internet Cloud --Internet RTR --ASA Where ASA is outside interface will have the private IP Address. But internet Router at both side will ha...

I see a lot of these messages, maybe hundreds per minutes. I feel this is not normal, but can never find any convincing information either way. Can anyone elaborate?

I'm seeing some weird logging behavior on an ASA5550 active/standby pair (Internet facing, running 7.2.4). As you can see from the example below, it is logging a number of denied messages for a normal (allowed by policy) TCP session. Jul 16 2008 09:2...

I have a Pix with a blank running config, I can load the 7.2 from Monitor mode OK, when I try to then get the 7.2 .bin file tftp-ed to the PIX and saved in flash it gives me a "no route to host" errorPix E1 172.23.4.125 255.255.255.0laptop 172.23.4.1...

I have a client that requires an ASA front-end firewall that will pass all traffic to an ISA Server setting in front of the corporate LAN. There will also be a SPAM filter in the ASA dmz accepting all email and passing it through ISA to the mail ser...

I'm prepping for a possible Vista/Windows 7 rollout and I'm trying to find any information about Vista comptibility with a Pix 515E. So far I am unable to connect to the VPN that is setup on the device from any Vista PC (XP works great) and I have b...