Network Security

Hi folks,whats the order of operation when it nats, acl and routes.When it comes to routing are you routing the pre-nat address or the nat'd address?Anything to clear it up would be appreciated. Does it work the same way as the router?CheersTony

Hi All,Good day.There are "permit ip any any" rules implemented in my cisco pix firewall by the previous administrator.There are more than 5000 users accessing hundreds of servers behind this firewall and no proper change management system to track t...

Hi folks,if you have a failover occurrence and the primary reason resolved can the secondary remain active indefinately ?

Dear all,We are facing problem with our WS-SVC-NAM-2Reports are not getting generated, pls help urgently.Diagnostic logs : 1. 21 Oct 10:23:21 last message repeated 2 times 2. 21 Oct 10:23:21 Error 8 performing SNMP request. 3. 21 Oct ...

I am getting an erro when trying to open the ASDM to manage my 5520. I did upgrade my Java recently so I tried removing and reinstalling but I get the same error. Weird thing is that I am getting the same error from any computer I try, even with di...

Dear allour customer has a router 2800 in a branch site , they need to configure the router as a firewall and IPS.This router is working properly and all the users connect to their applications in the main site through it. If i start to configure the...

Hi,I have cisco PIX 525 with OS 6.3.I want to connect a pc directly to the pix inside interface and ping outside interface of pix from that PC.can anyone post the configuration for it.Early response would be highly appreciatedThanks in advance.

Dear allplease find the attached file.i have ips 4240 and it is working properly.i tuned some signatures to block the connections for any pc that has abnormal traffic or try to use P2P application but i want to know something in the attached file , w...

Hello,I require some assistance with how to set up DCE RPC, the configuration I have has been applied through ASDM 6.1(5) and the ASA 8.0(4).I have tried a couple of approaches;1) Created an inspect map for DCERPC (ASDM)2) Added DCERPC to the default...

Hi,I have a pair of Pix's configured for failover and stateful sync, but i have discovered that the sync is not working, after some investigation it looks like one of the FW's has had its interface assigned to the wrong VLAN.So the fix is to assign t...

Hi, I have home ezvpn clients (851s) terminated on a headquarter ASA5520, those home workers may call each other at home with Cisco VoIP phone behind 851s, call managers are in HQ, those VoIP phones have corp extensions. Often times users complain v...

We have a Pix 515 fw with an inside and outside interface that has the following static NAT:static (inside,outside) 10.2.2.2 192.168.2.2 netmask 255.255.255.255We also have a NAT acl that looks like:nat (inside) 1 access-list outbound-natglobal (outs...

Hi,I'm trying to provide suggestions regarding Cisco IPS Active Update Bulletin contents. According to a banner I can send my suggestions to "As always, please feel free to e-mail us if you have any comments or questions (ips-news@cisco.com)"I tried ...

I am in need to restore the configs to a new asa but they are running different ios software. How can i acomplish this?