Network Security

The setup is a bit odd, but here it is:I have a server that is inside my network (not in a dmz), that is accessible from the Internet via pix.I would like users internally to access the Public IP address of this server. They'd basically hit the Pix a...

Tacacs servers moved to a new subnet. Changed the AAA and telnet statements on the PIX to point towards and allow the new servers.Egg on my face, when I couldn't log into the PIX. Checked syslog and saw that there was no route configured to the new s...

I have a server (A) behind a Pix 510 that is requesting udp traffic on port 7004 from a server (B) outside of the PIX. I can ping Server B from Server A. In one of my wireshark captures I see that server A is requesting UDP traffic on port 7004, bu...

Hi all. My office gateway is a asa5510 and i would like to know if its possible to enable netflow on that device. Thks in advance.

Dears,    i replaced pix515 with Pix515E with the same configuration but it is not working.can you help me?

Hi, How is it possible to create an access-list on the ASA or PIX using the TCP flags such as syn, ack, etc. I tried to create here but it did not work nor appears options.Regards

Hello,I normally logon to our ASA using my SSH2 username and password.Thing is if I telnet to our ASA it asks for a password which nobody knows, how can I change this as I have access via SSH to do this?

Hi,Was wondering of somebody could help me. I have deployed NAC for a customer, however some users that are to access the network remotely (behind ASA remote access) use an Anti-Virus unsupported by NAC.What is the best way to build a rule to policy...

Hi,I basically facing 3 problems.1. From outside I am not able to manage the CiscoASA5510 using putty SSH.2. From Local (inside network) network also I am not able to access the box through putty (SSH)where I am able to telnet to it from inside netwo...

This is all about an AIRPORT.They've been using as a firewall " POWER-1 5075 " and now they want to upgrade it to Cisco Firewall. Can anyone please tell me what Cisco firewall best suits the specifications of this " power-1 5075 " firewall.Here are s...

Is Cisco ever going to achive ICSA certification for the ASA 5500 series, or is Cisco declining to pursue this important certification, which is a regulatory requirement for certain government systems.

We have an ASA (running v7.2 software) at our head office. We have a large number of remote connected sites which connect to head office via IPSEC VPN.We have the one internet pipe which is shared by everything i.e. head office internet use, FTP tra...

I've got a PIX 525 that has a pool of NAT addresses that looks like:x.y.170.0 - x.y.175.253x.y.175.254Recently, a user had problems with Internet access and I noticed her address was mapped to x.y.174.255. Traceroutes went several hops to their desti...