Network Security

i have configured pix 515e for vpn client. i then installed cisco vpn client in my pc. now if i connect my pc to pix using the cisco vpn client ,i get connected and pc is assisgned a ip address from the pool i have configured in pix.my issue is : whe...

Dear All,I have ASA 5510, and I want to use one Ethernet port of it as like sub-interfaces in which I want it to have two IPs.Somebody told me that I can configure something called virtual zones !consulting your expertise, how can I do this?

Hi,I have to implement the traffic shaping on user flows based on profile authentication because I want to configure SSL VPN clientless.I would like to know if the ASA 5500 appliance is able to do that or I have to know the destination IP address and...

I'm trying to setup transparent caching to a Squid server using an ASA5505 running the 8.2(1) software. I believe my config is correct, but still the Squid server cannot register with the ASA. In the ASA I have this:wccp web-cachewccp interface Insid...

Hello all,I have two ASA5510 with Base License, connected on dedicated link. So far I have a site to site VPN configured to encrypt the traffic between the two sites. Now, we want to implement VLANs at both sites and be able to transmit the VLAN info...

Dear All,I am configuring site to site VPN, I have one 2811 and one 1811 cisco routers,Please tell me by using this configuration do i need to dial ??? or it will connect automatically,,,from the router it pings its live ip but dont ping inside ether...

Is it possible to setup a site to site vpn with a pix501 when one site has has a dynamically assigned external IP? The pix is running verion 6.3, is there any other way around this that doesnt involve changing the config everytime the IP address chan...

All,I've noticed that I can't ping a public device (on my block) from the vpn. The vpn is NOT my firewall, but another ASA (5520). The inside interface on the ASA is on my private side. From a host on the lan and not on vpn, I can ping this device. T...

Hi, I'm seeing a lot of "DENIED LAND ATTACK" messages coming from a PIX 515 v.6.3 on my CS-MARS console. I'm not a PIX expert, but couldn't spot anything.It must have something to do with the NAT (Internet searches have pointed my to such things as D...

I have a Pix515 and was wondering if there is an easy way to email administratos when an inspect rule is violated. For example one of my ESMTP rules was violated and the following was logged in syslog:%PIX-4-108004: ESMTP Classification: Dropped conn...

Hi,Can anyone tell me if/how to generate/install a Certificate from our internal windows based certificate authority.We have redundant CAM and CAS and need to deploy to a production environment but the only certificate is the default perfigo that the...

Dears,    i connected new branch through DMZ "new" on PIX as follow.i reached all LAN but i can't get Internet although i can resolve from local DNS.attached PIX conf and HQ routernew dmz is "new" and new subnet is 1.1.1.1

Hi,Could the use of sub-interfaces on the DMZ of a FW prevent servers within the same DMZ from communicating at application level? Servers on same subnet were not able to telnet to their application port.