Network Security

Good Day,Let me preface this by saying that I do not have control over our router and getting any configuration changes would be problematic. (strange but true)We currently have four subnets w/public IPs connected to 4 of the router ports. We are con...

Pix 515E 6.3(5)I need to permit my users access to an external website that uses port 8090.Would this be correct?access-list permit tcp 192.168.1.0 255.255.255.0 any eq 8090Would I also need: Fixup protocol http 8090Thanks.

we are using 3rd party ipsec in transport mode from client to server, but when i put ASA 5520 with dynamic NAT , client is not establishing ipsec communication with server even if everything is allowed. How can the client connect by NAT with ASA 5520...

I have set up an IPS senor and was getting a lot of alerts generated for signatures 12673 (Recognised Content type) and 12676 (Request method not recognised) these are generated when SMS clinets communicate with the SMS server.Analyses showed the con...

I would like to form a vpn between cisco pix 515 and watchguard 1250e. For some of the reason, I would like to route port 80, 443 services via watchguard to access the internet.I have success to make a zero route to route all traffic via watchguard t...

Hi Forum,¿How do I configure the firewall to let traffic by dynamic MS-Rpc ports (>1024) between member server in DMZ in DC and intranet?¿The Service Policy Rules would provide for that purpose?Thanks for all.

I'm trying to all all inside access to the DMZ and the internet. DMZ has web server and Email.Followed a document from cisco...I'm attached a config.Can browse internet from both DMZ and Inside networks. I will rate high for any assistance.

Hi,Is it possible with the ASA5500 to allow only connections initiated only from one side (e.g. inside)? No NAT involved!Thanks.Gabi

In a ZBF (IOS 12.4(20)T1, what happens if the following class-map is used in a policy which is tied to a zone pair and an interface, but the class-map does not have a "match" statement under it? Is the default to drop all since there is no match? O...

Dear all,kindly show me what could be the cause of ASA5550 restarted suddenly. and where can I see the logs of it and how to rectify.thanks & regards,

Hi everybody.Having used iptables and sofware firewall (like astaro) in the past , now I 'am tring to understand nat on a pix 6.3I'm tring to redirect conexions to ports on externals ip addresses to a server with an internal ip I mean:the connexion...

HiI've set up a secondary firewall for guests to access internet.It's an ASA 5505 where i used 1 of ourpublic ip addresses on our internetconnection. so the ASA is side by sidewith our firewall to the internal network.Guests have internet just fine a...

Hi all. I currently have a PIX 515 running IOS 6.3. I plan on buying a PIX 515E UR with IOS 7.0 or 8.0 on it.I want to allow my Windows users to use PPTP Windows vpn connections to make an inbound VPN connection to our PIX and still allow them to a...

Greetings,I am using a 851(12.4-15T7) router (spoke) over a 6M DSL connection connecting to a 3620(12.3-22a) router (hub) with a 100M pipe to the Internet.My download speeds at the spoke location over the dmvpn are 1M at best. Without the dmvpn I am...