Network Security

When trying to connect to an ftp site, we never get the login prompt back. We have a Cisco ASA 5520 running 8.0.3. We can send to other ftp sites.FTP works fine to the same site from 2 of our other locations, running Cisco Pix 515 6.3.We do have the ...

There is this website that always capture the internal IP addresses of my network instead of the public IP address on the outside interface of the PIX firewall.Please, I need to stop this issue fast. Any suggestion?

I have a question I have a pix 515E and what I would like to do is allow a certain subnet out to only talk to a specific subnet out on the internet how would I do that? So for example I have a user subnet on the 10.255.186.0/24 subnet and would like ...

Hi,I have a Cisco ASA 5520, I have a 3750 with VLAN's connected to the firewall and one of these VLAN's is a remote network.At the moment their router is not managed by us and this remote LAN uses one of our DHCP servers within the firewalls inside i...

Hello, My client has SSL VPN enabled on his ASA. THe client wants to prevent brute force attack to the SSL VPN. He is using ACS for user authentication with max failed login limited to 3 attempts. However, if the username is not in the database ACS w...

Good afternoon (or morning depending where in the world you are).Can anyone help me with the following?We have a requirement to implement connectivity to a number of partner sites from a number of our satellite sites. Traffic will be varied but will ...

Webserver Real Inside address: 192.168.0.100Webserver static translation address: 999.25.160.166.I can ping 999.25.160.166 from Internet and remote desktop access server 999.25.160.166 with port 3389 .But I can not web access server 999.25.160.166, a...

We have ASA 5550 (ver. 8.0.4). We configured the ASA so that messages can be sent to Syslog server. We were able to ping the Syslog server from the ASA. However, no messages are sent to the Syslog server. The Syslog server has been configured to acce...

Hi All,I have the following NAT exemption configured on my firewallaccess-list in_nat0_out extended permit ip 10.0.0.0 255.0.0.0 x.x.224.0 255.255.248.0nat (inside) 0 access-list in_nat0_outThe statements above basically does the NAT exemption for us...

Hello, I was trying to reset a password on a PIX 520, with Floppy drive and installed the image with the "rawrite.exe" using the file "nppix.bin" which comes in the manual for this version of Bios. I've tried other versions of files "bin" to reset th...

Hi,Does anyone have experience with creating location aware policies in CSA? I'm trying to create a policy which contains 3 location aware rule modules.Is there a limit on the number of location aware rule modules that can be a used in a policy?The r...

I have a functional ipsec tunnel between a PIX 515 and an ASA 5510 with version 7.0(7). I'm trying to replace that PIX 515 with an ASA 5510 with version 7.0(8). The configuration seems consistent to me, with the exception of the security-association ...