Network Security

I have a ASA5505 with mostly factory default configuration. Its license allows only two vlan interfaces (vlan 1 and vlan 2). The default config has interface vlan 1 as inside (security level 100), and interface vlan 2 as outside (security level 0 and...

I'm re-posting this, because it seems to have died out on answers. I've also attached my configs:Please, I've been working on this for a few weeks now, and have had to learn everything pretty much on my own, because no one can seem to give me an ans...

Hello, Have a PIX 515E with a subnet connected to the DMZ port. All servers on the DMZ port, lets say 192.168.1.0/24 network have arp entries to any server on the 192.168.1.0 network with the MAC of the PIX port. Does this mean that and intra-serv...

I am looking into getting a 5505 for a client who has two ISP Internet connections. Do I need the "security plus" license since I need three FULL VLANS (ISP1, ISP2, and inside LAN) and not the two + one-sorta-functional VLAN that comes by default o...

I'm monitoring our Cisco ASA via SNMP.So far I found :- Total number of RAS sessions : 1.3.6.1.4.1.9.9.392.1.3.1.0- Number of IPSec VPN tunnels : 1.3.6.1.4.1.9.9.171.1.3.1.1.0- Total number of SSL Sessions : 1.3.6.1.4.1.3076.2.1.2.26.1.2.0I'm l...

I have 2 unit ASA 5520 with AIP-SSM-20 for front-end and 2 units ASA5520 with AIP_SSM-20 for back-end.I also have 2 units catalyst 6509. How should my design looks like.

IDS is not generating events. Following message shows up in the event log.evError: eventId=1230128220192233058 vendor=Cisco severity=error originator: hostId: SI-IDS01 appName: mainApp appInstanceId: 397 time: Feb 10, 2009 04:...

Dear all,I am having problems getting DHCP relay working at a remote siteAt the Main site i have a Windows 2003 DHCP Server behind a VPN Concentrator 3005At the remote site i have a Cico PIX 501.The VPN is workings correctly and can ping from both en...

I have a 2811 router with IP Inspect enable for Ingress traffic but it is quite generic:ip inspect name firewall tcpip inspect name firewall udpip inspect name firewall icmpip inspect name firewall dnsint Serial1/1ip inspect firewall out Inspection n...

When trying to connect to an ftp site, we never get the login prompt back. We have a Cisco ASA 5520 running 8.0.3. We can send to other ftp sites.FTP works fine to the same site from 2 of our other locations, running Cisco Pix 515 6.3.We do have the...

There is this website that always capture the internal IP addresses of my network instead of the public IP address on the outside interface of the PIX firewall.Please, I need to stop this issue fast. Any suggestion?

I have a question I have a pix 515E and what I would like to do is allow a certain subnet out to only talk to a specific subnet out on the internet how would I do that? So for example I have a user subnet on the 10.255.186.0/24 subnet and would like...