Network Security

Can I map the host part in a dynamic NAT translation "one to one"?I am separating two private class C networks with a PIX 525 firewall (v7.0).I would like the last octet to be preserved during the translation without entering 254 static statements.E....

There is a default Perfigo root CA certificate that comes with the installation of NAC, I have now purchased a valid Verisign CA cert, when i import the root CA into trusted CA's its accepted, however when generate a cert request and get it back from...

Hi,I need to manage an ASA 5510 by remote using a Cisco vpn client.I have a 7.2(1) an it's running. I logged into the vpn and ssh I can connect the inside IP of the ASA. I cannot ping the inside IP!Trying the same scenario on another 5510 with ASA 7....

Hello There,I have to sites to configure VPN connection. Each have a Cisco 1721 router. Can anybody help with a VPN configuration samples or guides for this? ThanksDaniel

I have an ASA 5505 setup with 3 vlans (outside 0, dmz 50, and inside 100). I can't figure out how to allow the clinets on the inside vlan access to the dmz. inside has access to internet, dmz has access to internet, and internet has access to dmz. My...

IPS 4255 6.0(4)E1 is installed in Inline mode(one interface Inline pair) between Nokia Checkpoint Firewall and Cisco router connected to ISP through Cisco Switch. In another Inline pair is connected to Intranet traffic and DMZ.Interanet is working fi...

Have a need for remote support application to use port 80 traffic instead of 443 as some remote support users have port 443 blocked. Traffic is not http, so this needs allowed. Seems like default for ASA 7.2(4) is to block non-standard http. Not much...

There is one particular outside mail server we're having trouble sending to. Basically, our server (Groupwise) does an EHLO, and the other server offers STARTTLS. Our server sends a STARTTLS, sends a few bytes of encrypted data, and then the other se...

I have a remote site that has somehow managed to loose the power cable that plugs into the power adapter and the wall for the ASA 5505 they have locally. This is the only office that I have with a 5505, so I dont have another one to compare against. ...

My configuration is simple and testing has gone well.... I started off with a Class map that only matched on an access list. After successful testing I added a subordinate class map for protocol matching. If appears to be working but the statistics d...

Have a need for remote support application to use port 80 traffic instead of 443 as some remote support users have port 443 blocked. Traffic is not http, so this needs allowed. Seems like default for ASA 7.2(4) is to block non-standard http. Not much...

Hello, I have a IPS-SSM-20 (6.2.1) and I'm using IME 6.2 to manage it. On IME-> Configuration->Time Based-> IP Logging is possible to capture a particular IP traffic and download the file. Does someone know, once downloaded, how to read it ?

Hi,i cannot access the mail server from internet. can anyone help.following is the setup:PIX outside interface connected to INTERNET.PIX inside interface connected to LAN Router.Router interface connected to switch.Email server having ip 10.2.1.5 con...