Network Security

Hi Everyone,I am hoping someone can provide some advice regarding an ASA in transparent mode sitting in the middle of a .1q trunk.Scenario is two switches (one routing) has multiple VLAN's setup and then a trunk down to a L2 switch which then has all...

I have a mail server that is in the DMZ which is behind the Cisco 2621 router. I cannot get it to ping past the internal interface. There is a ip nat statement:ip nat inside source list 10 interface Dialer1 overloadBut this is not helping, the Dial...

With the newest Java SE 6 update 13 (& 12 as well), PDM from the PIX 515E (PIX version 6.3(5), PDM version 3.0(4)) can't be launched (ie the PDM window can't display), and this whether I use Firefox 3.0.7 or IE 7.0.5730.13.I'm very very certain it's ...

Can anyone see what I have misconfigured? I have AnyConnect connected on WAN of ASA and I receive an ip address from the pool of 192.168.180.0. I am trying to ping from 192.168.180.x assigned to Anyconnect client to Inside host at 192.168.150.50. I k...

Hi All,I have a PIX 515 6.3 and I want to have the LAN behind a DMZ to access the servers on the inside LAN and also the remote hosts which are routed on a L3 switch.This is what I did :nat (DMZ) 4 192.168.4.0 255.255.255.0 outside 0 0global (inside)...

Hello , Could you review my IPS design (the topology picture is in the attachment) ? Can I have one IPS with three or four ports attached to the same switch in an etherchannel? I am talking about one IPS with multiple interfaces. For example two I...

I want to start by thanking everyone for taking the time to ready this. We currently have a Fortigate firewall in place. We have multiple VLANS seperating our voip phone system from the rest of our traffic, and we also seperate out our guest wireless...

It looks like Cisco stopped posting the new signatures on their FTP in cisco/ciscosecure/ips/6.x/sigup as of the end of Feb. As a result the update script is not updating the IPSs any longer. I could not find any advisory about that on CCO. If someon...

Hi, we have a PIX-515E at our customer site. The inside interface is connected to a 3750 switch and the outside is connected to a 3640 router.When trying to ping from the 3750 to the 3640 through the PIX, 10 to 20 packets out 100 get dropped, this ha...

I have an ASA 5510 and was wondering if someone could shed some light on this. If someone internally would install a producted (keylogger or something of that nature) that gathered information and then sent it to a remote location could the ASA dete...

Hello,we have an asa 5510 with software 8.0. We have to Internet Lines, 1 16 Mbit ADSL and 1 4 Mbit SDSL. Internal Users should use the ADSL for faster downloads so the default gw is the ADSL. VPN should use the SDSL. This isn't the problem, i can us...

Does anyone know if the ASA can redirect to a Proxy Server? For example I want to redirect all web traffic (80,443) to my proxy server.Thanks in advance

if i create two context then its working individual ok but i give two IP address on one interface for different context .How its working individually ?

Hii am using PIX 506E with software ver 4.3.i try to recover my password its fails.Please go through the following .this steps followed during password resetmonitor>interface 10: i8255X @ PCI(bus:0 dev:13 irq:10)1: i8255X @ PCI(bus:0 dev:14 irq:7 ) U...

Hi everyone,I am looking for some clarification on the behavior of an ASA Active/Standby failover pair when the units contain AIP modules. My experience with SSMs is mostly with the CSC module.The documentation states that if the AIP module in the Ac...