Network Security

We are currently running a Pix 515E 6.3(5), no failover mode. I am getting alot of drops on the outside interface on SMTP port. The error is 106015 Deny TCP (no connection) from IP_addr/port to IP_addr/port flags. I have researched the error and it a...

I'm having some trouble with port forwarding on a 515E pix.I have the following commands in the configstatic (inside,outside) tcp 11.11.11.11 smtp 10.0.0.55 smtp netmask 255.255.255.255 0 0static (inside,outside) tcp 11.11.11.11 www 11.11.11.11 www n...

After configuring a Basic firewall using Cisco's configuration professional internal hosts are unable to access the internet. Host ipconfig info displays dns servers addresses and domain name; however web browser will not bring up web pages. This is ...

Does anyone have any experience setting up a ASA/FWSM to permit an IPSec tunnel b/w Windows 2003 server to pass through? The Microsoft team doing the implementation claims the server behind the FW cannot be NAT'd since their solution has issues with ...

I have a ASA5520. Just got an ASA-SSM-AIP-20. Currently manage the ASA with the ADSM software. What additional sw is required to manage the IPS card ? Many thank,

Hi,I'm not a networking person at all and don't know where to look. We have an ASA 5510 and I want to see who is streaming video and surfing unmentionable sites. Once I find out who and where they are going, I eventually want to block those sites. We...

We are currently reviewing various ways to provide virtual desktops for home users.One of the things we are testing is using the ASA webvpn option with the RDP plugin to connect to a remote desktop.One issue with this however is the method of connect...

I am green when it comes to firewalls.I currently have a PIX 506 and we are upgrading to an ASA 5510. It has had so many changes that I want to start fresh. So I am not really trying to view the 506 config and duplicating it.The 5510 has ASA v 8.04. ...

I am using a ASA 5505 with two IPSec Tunnels & Remote users IPSec VPN's. I am finding that the unit locks up after about 2 days uptime. It remains visible locally so I can do an immediate system reload but there is no internet access, the tunnels gop...

I am using the anyconnect client, my ssl connections never technically drop, however, if I have a session open, such as telnet, throught the ssl tunnel, it will randomly drop. I have keepalive enabled yet I still ahve this issue. The IPSEC client doe...

When my client uses a remote VPN connection into the central office, his local subnet and central office is in the same IP address scheme. This causes an issue when he wants to connect to servers in the central office.Is there a way out of this ??

HI allim trying to set up a Remote Access VPN on pix 6.3 (where once connected you are assigned only 1 IP and that IP can only RDP to one server 192.168.1.17) and although i connect to the the vpn ok, i cant RDP to that server. on the vpn client, the...

Hi, without syslog messages to CSM I cannot track ASA 7.0(8) failover event with snmp, in CSM Performance Monitor 3.2.1.ASA is sending syslog messages to CS-MARS by now and I need to avoid the syslog traffic duplication.Performance monitor need only ...

Please i am using netwflow analyser to monitor my traffic. i notice that my traffic are going to broadcast address of the subnet when I click the 'IN' radio button with application - NETBIOS-DGM,and to the reguired destinaion when I click the 'OUT' r...

Hi, We have ASA 5505 installed in Production and I want to add ICMP in default_inspection but when I execute sh run command then I don't see any default_inspection rule. Please advice