Network Security

we are using 3rd party ipsec in transport mode from client to server, but when i put ASA 5520 with dynamic NAT , client is not establishing ipsec communication with server even if everything is allowed. How can the client connect by NAT with ASA 5520...

I have set up an IPS senor and was getting a lot of alerts generated for signatures 12673 (Recognised Content type) and 12676 (Request method not recognised) these are generated when SMS clinets communicate with the SMS server.Analyses showed the con...

I would like to form a vpn between cisco pix 515 and watchguard 1250e. For some of the reason, I would like to route port 80, 443 services via watchguard to access the internet.I have success to make a zero route to route all traffic via watchguard t...

Hi Forum,¿How do I configure the firewall to let traffic by dynamic MS-Rpc ports (>1024) between member server in DMZ in DC and intranet?¿The Service Policy Rules would provide for that purpose?Thanks for all.

I'm trying to all all inside access to the DMZ and the internet. DMZ has web server and Email.Followed a document from cisco...I'm attached a config.Can browse internet from both DMZ and Inside networks. I will rate high for any assistance.

Hi,Is it possible with the ASA5500 to allow only connections initiated only from one side (e.g. inside)? No NAT involved!Thanks.Gabi

In a ZBF (IOS 12.4(20)T1, what happens if the following class-map is used in a policy which is tied to a zone pair and an interface, but the class-map does not have a "match" statement under it? Is the default to drop all since there is no match? Or ...

Dear all,kindly show me what could be the cause of ASA5550 restarted suddenly. and where can I see the logs of it and how to rectify.thanks & regards,

Hi everybody.Having used iptables and sofware firewall (like astaro) in the past , now I 'am tring to understand nat on a pix 6.3I'm tring to redirect conexions to ports on externals ip addresses to a server with an internal ip I mean:the connexion t...

HiI've set up a secondary firewall for guests to access internet.It's an ASA 5505 where i used 1 of ourpublic ip addresses on our internetconnection. so the ASA is side by sidewith our firewall to the internal network.Guests have internet just fine a...

Hi all. I currently have a PIX 515 running IOS 6.3. I plan on buying a PIX 515E UR with IOS 7.0 or 8.0 on it.I want to allow my Windows users to use PPTP Windows vpn connections to make an inbound VPN connection to our PIX and still allow them to acc...

Greetings,I am using a 851(12.4-15T7) router (spoke) over a 6M DSL connection connecting to a 3620(12.3-22a) router (hub) with a 100M pipe to the Internet.My download speeds at the spoke location over the dmvpn are 1M at best. Without the dmvpn I am ...

Hi,I have an ASA5520 which is to be deployed in out internal network and the following subnets are configured..outside -> 10.1.127.0 -> security level 0inside -> 10.1.110.0 -> security level 100We want the firewall to work more as a router only with ...

Hi,I wanna now how much static routes you can configure in Cisco PIX/ASA in version 7 and 8 ???

Talking about the Mac NAC agent the CAM config guide says...'The Log file (~/Library/Application Support/Cisco Systems/CCAAgent/event.log) is encrypted. The user must use the decryption tool on Windows to see the log in clear text.'Does any one know ...