Network Security

I have established a site to site vpn between 1841 route and PIX 515, the tunnel is up but I am not been able to access the PIX 515 side. I have checked most of the things on 1841 side as soon i generate traffic from my side the VPN tunnel gets up bu...

I do not have a Pix at the moment to test to I'll ask this question:R1---(i)Pix(o)---R2R1 is doing eBGP with MD5 authentication with R2. Pix is in routed mode.With Pix code 6.3.x, I have to do this:static (i,o) r1 r1 netmask 255.255.255.255 norandom...

How to see the live traffic on the PIX interfaces.whether we have to use tcpdump command as we use in Checkpoint or there are other command also to view live traffic.

Hi, Can anyone send a link of Cisco Security Manager Configuration document?Thanks.

If I create an IPSEC / 3DES tunnel between to sites where the both have a 1.5MB connection what is the effective size of the tunnel? 1.5MB - 8% = 1.38MB?

Have pair of ASA5550 firewalls linked as failover pair. Getting the above message in the logs every few mins. The 10.1.1.4 address is the inside interface. Does this message mean that there's a mismatch in the arp cache for this mac address (ie it ha...

hi fellowsas the title says, we have the ASA 5520 with the IPS module SSM-20 and the problem which i am facing is that on the ASDM In IPS main dashboard, the interface status showing that inside interface is Unpaired and outside interface is Manageme...

Hi All,I have ASA 5520 installed in network. This ASA is having SSM module with 4 gig ports.Can these ports on SSM module be utilized as normal interfaces of firwall? Is if , a saparate zone, for example DMZ1, can be introduce on the gig ports of SSM...

Dear Team,1.Why there is a need for setting SA lifetime.2.Whether SA will reset earlier if we have set an idle timeout for VPN tunnel.I mean if the VPN tunnel is idle for some amount of Time and if I have set the idletime out to be less than SA reset...

Hi team,We use static (inside, outside) IP1 IP2 where IP1 is the IP which is to be translated and IP2 is the IP which is translated.This command is used for accessing from outside to inside..Sameway if we want to access something from internal to ext...

Please correct me if I am wrong:-1.Client Mode is used when the users are sitting in Comany's internet network with Private IPs and will get NATed to public IP when accessing the Easy VPN server.2. We use Network Extension mode when we are accessing...

Hi,I can't issue this command,FWSM(config)# int vlan 100Unknown interface vlan.Any ideas why?Thanks,vnt

Hi guys,I have a problem when try to connect two LAN (one ASA on each LAN)I have this error----%PIX|ASA-6-106015: Deny TCP (no connection) from IP_address/port to IP_address/port flags tcp_flags on interface interface_name.Explanation The security...

We currently have a Gigabit SONET ring between several locations. We also filter all traffic through an "outsourced" method and don't have our own internal firewall system. We run through this external provider and use a proxy to access the outside...