Network Security

I recently inherited management of a Cisco PIX 515E Firewall running IOS version 6.1(4). The PIX has very broad ACL's for NAT.They include:access-list ipsec permit ip 10.2.1.0 255.255.255.0 10.10.100.0 255.255.254.0access-list nonat permit ip 10.2.1....

Hi ,I want to upgrade my following Firewalls.Site1 : Cisco PIX from 6.3(4) to 7.2(3){Redundant Hardware available)Site2: Cisco ASA from 7.2(1) to 7.2(3)with Redundant hardware available.My Question : While doing this OS Upgrade activity Do we need Do...

Hi,I'm not sure this should be posted here, if it shouldn't please tell me where.We have an ASA 5520 working with CSC. We activated the disclaimer but it works in both incoming and outgoing SMTP mail. I would like it working just in case of outgoing ...

I have installed a new Cisco ASA5505 appliance and almost all is working now except internal Windows clients using PPTP to connect to external servers. The ASA reports the following log;"regular translation creation failed for protocol 47" followed b...

hi,using pix 502, if i port forward a website so that it can be access by users. Would the webserver get infected by a virus for example, if the user's laptop is infected with a virus ?Thanks

I have two Broad Band internet conection and two lan network.One lan network is using the one internet Connection and another lan using second internet connection.Already I am using the ASA for one internet connection.I want to connect the second int...

Hi, Where can I find the description of Cisco IDS log format? I can find information about total signatures and the meaning of the signatures. But I cannot find the following:1) what are the different log formats supported by Cisco IDS (XML, plain te...

We are trying to work out a delay issue related to VoIP control traffic to a remote site... When someone pressing a button on a remote phone the response is delayed. One thing I noticed today at the head end, trace routes to the remote side look weir...

HiI've setup an account with DynDNS and I've tried to configure my 1800 router to update this host record, either via CLI or through the use of the SDM, yet neither method seems to be working. I've included my dyndns config for your review;ip ddns up...

is it possible to do L3 NAC OOB with VGW.The documentation does not say that it is not possible, but i see some technical difficulties.In VGW deployment, the Auth IP = Access IP and only the vlan id changes. But on the other end of an L3 link I canno...

Hi there, One of the configured interface shows down, down on the ASA..any idea what could be the issue. I have checked all the connections and everything seems to be fine.Thanks

we have an ASA5505 running 8.03 setup with two interfaces inside/outside. There is a SQL server on the inside leg with a static NAT to the outside so it can communicate to the rest of the company's internal network. This setup has been working for a ...

Hi,where to place the "snort" IPS, whether before the FW or after the FWCan any one send me link of sample IPS configuration with diagram

Hi Can VPN Client automatically reconnect to virtual cluster IP if current ASA fail or users must manually reconnect in ASA VPN load balancing implementation?