Network Security

Hi,It seems that the PIX/ASA does not allow an inside host to hit an static nat such as below on the external public IP 111.222.3.4.static (inside,outside) tcp 111.222.3.4 80 10.200.4.20 80 netmask 255.255.255.255I know this is what internal DNS is f...

Hi,I've been trying to install CSA MC 6 on a client's HP DL380, after each install the server does not boot.We can get into Safe Mode after a few reboots but I don't currently have any log files as the client has rebuilt the server.Does anybody have ...

Hi AllI have 2 5510 in failover and the failover works perfect , but for some reason the main one is the secondary unit and not the one which is configured as primary.How comes?There was no shutdown or power loss on teh boxes.Thanks,Vlad

Hi Everybody, We've recently had some odd issues with certain internal IP's getting blocked from accessing our DMZ. It seems almost random, one user will loose access and the only thing that will restore it is to get a new IP address. I haven't found...

I'm trying to establish a VPN connection with the following:Cisco/Linksys WRV200Cisco 850A little backgroundthe Linksys WRV200 has been in place maybe 1 year and VPN services have been fine. Clients connect using the QVPN client and have had no probl...

Hello all,I have an ASA 7.2(2) that is currently generating a default route into my NSSA area for which it is the Internet edge. I want it to redistribute some statics too, but I'm worried about redistributing the 0.0.0.0 along with the "default" ro...

I'm trying to setup SNMP v3 on ASA 5540. However, I only see V1 and V2c as the available options. When I searched cisco website, the OS version 7.2 should support v3. Am I missing something here?Thanks.Peter

I have a FWSM deployed where the MSFC is behind the FWSM. A department need has come up that requires them to be placed in a VLAN an islolated. Does that mean I will need to switch models and move the MSFC in front of the firewall?Craig

Hi All,I know that if I configure several (up to three) default gateways out the same interface on the ASA, then the ASA will load balance the traffic. Now, if I configure several default gateways pointing out different interfaces on the ASA, will th...

Does the PIX (6.3(4)) support 'extended passive mode'? Fixup is enabled.Thanks,Charles

I'm having a problem with traffic traversing the ASA on the same interface. I'll explain my configuration/setup, and then the symptoms.I have configured my ASA 5505 with the inside interface having an IP on the internal data VLAN (VLAN 1, security le...

Hi,I have a central ASA5510 + ASA5505's at two remote offices. I want the remote offices to have all traffic directed over the vpn link to the central ASA, which then handles internet and lan traffic. I have a little trouble figuring out how this sho...

Hello!Can anyone tell me, is there any way to let broadcast messages go through VPN tunnel without GRE as my configuration is not site to site? Joining client broadcasts its packets in order to find hosted game on another vpn client and can't find it...

I attempted to upgrade from 5.1-7-E1 to 6.0-5-E2 using the file IPS-K9-6.0-5-E2.pkg. Doing a debug module boot command shows the file transfer and it eventually goes to the unresponsive state. I then imaged it to 5.1-8-E2 and it took the image. Fr...