Network Security

I woder if using ASA or PIX, can I set up the outside interface with 1 IP then for outgoing (on the same outside interface) with another IP address. For example: outside IP 1.2.3.4 then somehow for outgoing(return traffic if you will) the IP address ...

Hi,ISAKMP got stuck in reponder mode its coming up intiator mode..Is there any issue...2 IKE Peer: 1.1.1.1 Type : L2L Role : responder Rekey : no State : MM_ACTIVE Regardssateesh

We primarily use the ASA5520 as our firewall like most. Secondary function is VPN concentrator.Now looking into leveraging the WebVPN functions but I am concerned about performance impact.Documentation states support for up to 750 users but doesn't ...

I have an ASA 5540 with multiple context mode enabled. My monitoring host running opennms is behind one context, and hosts that it is monitoring are behind other contexts on the same asa. to get to the other contexts, traffic must pass through the d...

Hello,What is the diference between theASA5505-50-BUN-K8 and ASA5505-SEC-BUN-K9.It is only a licensing problem or the hardware is diferent.Thank youlaszlo

Hi Guys,I understand that FWSM 4.X software support RHI to inject any static ,NAT Pool in to MSFC for severs behind Firewall.I have set up like this :servers------(a)FW-context(b)-----vrf----Idea is like this : The FWSM's have multiple interfaces. Th...

I'm setting up an ASA 5505 in transparent mode and can't pass layer 3 traffic between vlans. This is a simple config and I'm not sure why it's not working. Here's how I have the interfaces configured.int Vlan 100nameif INSIDESecurity level 100int Vla...

I have installed Cisco Security Manager 3.2.1 with RME 4.1.1, AUS 3.2.1 along with Performance Monitor 3.2.1 version on the same server.Iam able to add devices in RME, AUS and working fine with adding devices in CSM and able to discover the existing ...

Hi,I want to create a remote access VPN connection for a partner to our company IT resources. I have a failover system PIX 515E with 6.3(5) OS. PIX outside interface has RFC 1918 IP Address and is connected to a router witch in turn is connected to o...

hi.we using seperate fwsm between two 6509 chassis.fwsm is active/stanby.we want to upgrade os of fwsm.i would like to know how to upgrade the fwsm.after stanby fwsm is upgraded,do i have to upgrade active fwsm?thanks you.

i know means of below static natstatic (high, low) low highbut,i want to know means of below commandstatic (high, low) high highstatic (inside,dmz) 172.17.211.0 172.17.211.0 netmask 255.255.255.0

I'm having issues opening up a http connection between a host on one interface (higher security level) and a webserver on another interface (lower security level). The webserver is statically mapped to a public ip address, and the host is using inte...

The design is: 1. Perimeter ASA2. Front end servers (DMZ)3. FWSM on Cat 65004. Back end servers - includes customer & transactional database (DMZ 1) 5. Back end connectivity to another site for transactional processing & response which then updates t...