Network Security

Hello and thank you in advance for any assistance you may provide.My logs register error message ASA-3-305006: portmap translation creation failed for icmp src Insdie:Netmon dst CCIB-DMZ:10.66.65.100 (type8,code0).I also receive similar message when ...

We have a core tunnel router at HQ that our branch routers establish a DMVPN tunnel with across our internet circuits. We have one branch that we can connect to from HQ via our data circuit, but we cannot get the tunnel to come up. The internet circu...

Hi I am new to cisco box. i have a ASA 5510 with ssm module. i would like to insert this device between the users lan and the server farm. the intension is to block the non legitimate traffic. and need to use the IPS module to detect possible attacks...

We have an Exchange server that is accessible on port 80 and 443 from the outside. When you go to the website using http, you should be redirected to https automatically. It works this was internally.On the firewall (Cisco ASA 5505), I am allowing tr...

I am at a dead lock. I am trying to configure two 7200 routers to establish a L2TP w/IPSEC tunnel between each other. I have one router configured as a LNS and the other as a LAC. I want this to be a constant connection. Any sample configurations, th...

Hi,I have following szenario:I want to reach a outside host under its original address and its NAT address at it seems to the inside world.(Host in the DMZ ist translated to the Inside Interface with a Static NAT rule).It is possible to reach this ho...

Hi,Can someone tell me if i need to check the following traffic is being passed on the PIX?Source: x.x.x.246destination: 172.18.46.75what is the command to figure out on PIX?& also need to check for hits on the access-list for:-access-list acl-test p...

Hi All,i am new to PIX firewallwe are having a pix515E firewall with 6.3(4)IOS i want to access SIP softphone to work from internet and my sip server is the DMZi have configure e0 IP add e1 IP add And DMZ IP add i want to know how to configure access...

Hipl share knowledge that without configured any static map from outside side ( private IP) not internet can access behind Pix firewall ?/anyone have doing practical experience ?/.thanksBiplob

I have a PIX515E (running OS 7.2x) and I need to use it to block specific URLs and IM for most users since they abuse internet access. Some of the top execs should be allowed to access all sites without restrictions. I currently have a "inspect http"...

I want to configure a couple of workstations on our network so that they can get only to URL's for Symantec, and then to a specific Web Server that we host that is public. Short of configuring our ASA 5510 to use WebSense (which is pending), is there...

I'd like to block ranges like 73.*.*.* and also ip's like 81.72.*.*. I know that I can block 83.24.42.* with 83.24.42.0/24 but what is the correct format for the first two?ThanksChuck

Hi,We've noticed that Active/Standby Failover does not function anymore.(Lucky for us the FWSM is runnig very solid)After restarting either one of the two units in the failover configuration, the already active unit becomes totally unavailable.In thi...

Hi,I have a "problem" with my PIX. I've searched the web and can't find an appropriate answer/solution. Hopefully, somebody here will be able to help me.Here's what I have in my logs:May 12 12:47:33 pix %PIX-3-710003: UDP access denied by ACL from 10...