Network Security

Dear all,    i have VPN configuration on PIX.when i logged on with mssvpn group, i cn't ping or access any thing on my network.

Quick question:Customer is building a management network within the overall data network. Customer has a pair of ASA's doing Active/Active multi-context with IPS modules. These ASA's are located in two different data centers served by two different s...

When I enabled PDM (so I can manage this guy via web), I noticed it keeps adding "PDM location" for every subnet/host/node etc to my ACLs. How do I stop it from doing that?Example:pdm location 10.10.10.2 255.255.255.255 insidepdm location 20.20.20.1 ...

All,What are the pros and cons of using a dedicated management interface for an ASA?Thanks,John

I have a Cisco PIX 525 with 5 interfaces. 1 is the outside interface with a public address, and there is another public network in the DMZ. Now there are no translations between the DMZ and outside as both contain routable addresses. Now I have cr...

I have running "FWSM Firewall Version 3.2(6)" and try to configure the logging timestamps in msec, like on IOS with "service timestamps log datetime msec localtime"Is there any possibility to do that ?

It seems that the latest official rdp,vnc, and telnet/ssh plugins (that is, the .jar files which have to be installed on ASA to provide clientless connection when inside webvpn portal) have some trouble when connecting machine runs jre 1.6U10 or late...

I went to do an er start and deleted the image and now can only go into romon> . I did not have a back up image so i downloaded the asa802-k8.bin file but now i do not know how to get the image back on the device. can anyone help?

Hi,we have simple NAT traversal configuration with an L2L tunnel lke this5505(8.0) -> DSL Router (NAT) -> Internet -> 5510 (8.0)The DSL Router gets a new IP every n hours.Configuration is like this:tunnel-group XXX type ipsec-l2ltunnel-group XXX ipse...

Hi, I would like to know what is the impact/loss of disabling stateful inspection on any protocol in the firewall such as 'no inspect sqlnet'. Is it a security threat etc ?

We have two locations, both with internet connections and both with Cisco PIX/ASA devices providing the internet. The two sites have layer 2 connectivity. The primary internet for both locations is out of site 2. How can we change over to use site...

I need to have sessions created in port 443 (ssl/https) to time up between 15 and 30 minutes, can I get a little help in the commands to acomplish this.Currently my ssh timeout display 60 not sure if that is seconds or minutes ?