Network Security

I have a PIX515E (running OS 7.2x) and I need to use it to block specific URLs and IM for most users since they abuse internet access. Some of the top execs should be allowed to access all sites without restrictions. I currently have a "inspect htt...

I want to configure a couple of workstations on our network so that they can get only to URL's for Symantec, and then to a specific Web Server that we host that is public. Short of configuring our ASA 5510 to use WebSense (which is pending), is there...

I'd like to block ranges like 73.*.*.* and also ip's like 81.72.*.*. I know that I can block 83.24.42.* with 83.24.42.0/24 but what is the correct format for the first two?ThanksChuck

Hi,We've noticed that Active/Standby Failover does not function anymore.(Lucky for us the FWSM is runnig very solid)After restarting either one of the two units in the failover configuration, the already active unit becomes totally unavailable.In thi...

Hi,I have a "problem" with my PIX. I've searched the web and can't find an appropriate answer/solution. Hopefully, somebody here will be able to help me.Here's what I have in my logs:May 12 12:47:33 pix %PIX-3-710003: UDP access denied by ACL from 10...

Hi,we are unable to pass voice traffic through ASA.Right now ASA is not in a network.Call manager is on 3550 switch.And that switch is directly connected to router 3845.We are using 3845 as a gateway.When we place the ASA in a network everything work...

Hello,We currently have an ASA 5510 setup for remote VPN purpose only. My question is, is it better to run VPN-POOL on ASA with the same subnet of the INSIDE interface or have the VPN-POOL on a separate subnet. I notice if we have the POOL on the sam...

Anyone know if the ASA will be supporting SNMPv3? I've asked TAC and they respectfully declined to answer and I never heard back from our SE.

Does the 5540 without the AIP-SSM module have a Fail-Close option?

Class BEST-EFFORT police cir 64000 bc 12000 be 24000 conform-action set-mpls-exp-imposition-transmit 1 exceed-action drop violate-action dropActually am an ameture in QoS and we are having a Policy map setting as above could you please clear ...

Hi, I am a real rookie to cisco, so please forgive me if I say anything silly. I wanted to know wich ports do I have to free, to make a VPN with a VPN CLient 4.7.00.0533. I tryed with 4500 UDP 62515 or 62514 UDP 10000 TCP, but nothing works. Could yo...

I am trying to map a Public IP to private Virtual IP on the load balancer which forwards the traffic to web servers.I have done all the necessary configurations on ASA, but the web service is still not accessible from the internet.Configuration: Outs...

Hello Guys, I am new the whole Cisco firewall thing but do know routing and switching some what. I have assigned the config below on my firewall and a ip of 192.168.1.3 on my switch which is plugged into my interface. I can not ping the fire...

Hi,I have been reading my books etc and then find out the PIX 515E doesn't support webVPN!!! Nice they could have put a header in each chapter.Anyway what VPN CLient does a PIX 515E v7.2 support ? Any clientless ones ...help ;(ThanksEd