Network Security

I have a PIX running 7.2(3) that I have allowed FTP traffic to a server on the inside interface.The "outside" interface has an ACL configured to allow the FTP/FTP Data traffic using "outside" IP address for the ftp server. A static NAT is also config...

hey folks,can anybody assist. i'm in a maintenance window which closes in 55 minutes and am desperate.i'm attempting to add a port-object to a service object-group. in doing so, it is returning the following error:ERROR: Unable to add, access-list co...

I have one firewall pix of face to internet. I need to give access to a computer in my internal network to a a ip address in the external network for one vpn conection I read and, i think that the configuration is the following:I don't know the type ...

We recently upgraded our PIX from 7.0(2) to 7.2(4), and this appears to have broken our video conferencing connections between Polycoms at two of our sites. We have a site that can connect us, but they can't see us. However, we can't establish a conn...

Hi,Can any one let me know the procedure to add ASA (asa803-k8.bin) with multiple context on CSM Ver 3.0.1It is accepting the ASA with single context.Please advice,Raj

Hi All, I want to implement a NAC appliance for a small network of users that connect directly to non-Cisco switches.As I understand, my only option is to deply NAC in in-band mode, in this way it does not matter which switch I use because the traffi...

I have a cisco 1841 router, on which ip inspection is enabled (IPS). The inspect max-incomplete for high is 500 and for low is 400. This is a gateway to an ISP (for internet) with 512K bandwidth. I get frequent transitions between aggressive and calm...

Silly, and embarassing question.On the ASAs, is the whole principal regarding flash memory, RAM and NVRAM the same?Meaning, like on switches and routers, the Flash memory holds the OS, the NVRAM holds the starup config and the RAM loads everything an...

Dear all,i would like to use IOS IPS 5.x format. the show subsys name ips gives me following outputips protocol 2.001.001i have this image installedflash:c2800nm-adventerprisek9-mz.124-19.bin"But it seems in my IOS Version there are some commands mis...

One of our ASA's went down for an unknown reason and needed to be rebooted. After coming back up, our site to site VPN no longer works. I've tried to refresh it with a no/crypto map to no avail. Here's the syslog errors being reported by the one that...

Hi All,If I upload a file to the ASA5505 is it possible to access it via HTTP or FTP from a client PC?Failing that can files be push uploaded to the ASA somehow. Basically I am writing a small app and would like to access the file system "over the wi...

I have implemented a few ASA firewall over the time and I have a question that I never solved.There is an option on ASDM in the NAT screen that says " allow traffic between interfaces without NAT" or something like this. This option insert the "no na...

Hi,I have configured Remote VPN access terminating at ASA5510 successfully.Remoye client is getting the IP assigned by the ASA,but that I am not able to ping the ASA inside Interface IP address and not able to ping any PCs which are in inside network...

Hi,I'm working in a migration of a CheckPoint Firewall to an ASA5520. I freeze on a situation that seems ASA cannot "reproduce" CheckPoint configuration. Follow the scenario:- IP Address X on the Internet access IP Address X1 in the Inside network th...