Network Security

I have a question I have a pix 515E and what I would like to do is allow a certain subnet out to only talk to a specific subnet out on the internet how would I do that? So for example I have a user subnet on the 10.255.186.0/24 subnet and would like...

Hi,I have a Cisco ASA 5520, I have a 3750 with VLAN's connected to the firewall and one of these VLAN's is a remote network.At the moment their router is not managed by us and this remote LAN uses one of our DHCP servers within the firewalls inside i...

Hello, My client has SSL VPN enabled on his ASA. THe client wants to prevent brute force attack to the SSL VPN. He is using ACS for user authentication with max failed login limited to 3 attempts. However, if the username is not in the database ACS...

Good afternoon (or morning depending where in the world you are).Can anyone help me with the following?We have a requirement to implement connectivity to a number of partner sites from a number of our satellite sites. Traffic will be varied but will ...

Webserver Real Inside address: 192.168.0.100Webserver static translation address: 999.25.160.166.I can ping 999.25.160.166 from Internet and remote desktop access server 999.25.160.166 with port 3389 .But I can not web access server 999.25.160.166, a...

We have ASA 5550 (ver. 8.0.4). We configured the ASA so that messages can be sent to Syslog server. We were able to ping the Syslog server from the ASA. However, no messages are sent to the Syslog server. The Syslog server has been configured to ...

Hi All,I have the following NAT exemption configured on my firewallaccess-list in_nat0_out extended permit ip 10.0.0.0 255.0.0.0 x.x.224.0 255.255.248.0nat (inside) 0 access-list in_nat0_outThe statements above basically does the NAT exemption for us...

Hello, I was trying to reset a password on a PIX 520, with Floppy drive and installed the image with the "rawrite.exe" using the file "nppix.bin" which comes in the manual for this version of Bios. I've tried other versions of files "bin" to reset th...

Hi,Does anyone have experience with creating location aware policies in CSA? I'm trying to create a policy which contains 3 location aware rule modules.Is there a limit on the number of location aware rule modules that can be a used in a policy?The r...

I have a functional ipsec tunnel between a PIX 515 and an ASA 5510 with version 7.0(7). I'm trying to replace that PIX 515 with an ASA 5510 with version 7.0(8). The configuration seems consistent to me, with the exception of the security-associatio...

Hi,I am looking at the logs in the ADSM and I get the following set of lines (at the bottom). What is supposed to be happening is that software on VISTA_CCTV on the inside is to talk to an internal address at 88.88.88.88. VISTA_CCTV -- [ASA] >>>INTER...

Recently we've introduced Websense to our environment and I am using a spanning port on the core switch to force all traffic destined to the Internet to go through websense, that works very well.The problem we have now is that Remote Access VPN users...