Network Security

I figured it out but if you have a better solution, by all mean please do.The ISP will be changed also so the DNS record will have to change. I will configure the DMZ with the new IP range from the new ISP. Change the server IP address and the DNS...

Hi Friends,I have installed cisco security manager 3.1.1 with SP3, RME 4.0.5, MCP 3.0, cisco common services 3.0.5 and AUS 3.1.1The existing PIX, ASA and ISR routers are added in RME and its working fine.The same devices are import from DCR and added...

Hello,how many group-policy can I configure on PIx 515E with release 7.x?Thanks in advanceB.

I "denied" IDs 1109/0, 1109/1, 1109/2, 1109/3, all Cisco IOS Interface DOS. The above was configured in the IDM>Configuration>Policies>Signature Definitions>sig0)>Active Signatures. Denying the above denied all Internet activity. How do I know whi...

Hi,I have the following config.ISProuter---ASA---3750-------LAN usersALl LAN users use VLAN 10 (10.10.20.50) as their default gateway. Int g1/1 on the 3750 is in Layer 3 and has IP address 10.10.18.5. Its 0.0.0.0 route points to the ASA internal inte...

I have two datacenters connected via EIGRP dynamic routing. Branch offices terminating at the datacenters via lease lines. I would like to backup the lease lines with ipsec vpn on either ASA's 5520 or higher or cisco 2800 routers. Using either EIGRP ...

515EI am in the process of setting up an in house mail server. In so I have setup smtp, pop3, and imap to pass to my mail server.for some reason when I do the telnet test for 25 from an outside location, the 515E returns the 220 and not my mail serve...

I have disable netbios on my servers. I am also trying to use CIFS in the SSL portal. it apprears that the CIFS is using port tcp/139. can we change that to use SMB on tcp 445

We are having trouble getting nac to verify the dat version on a workstation running Virus Scan Enterprise 8.5i. The checks are there to do the registry check on virus scan 8.0 but now the registry entries are different in 8.5i. Has anybody else ra...

We are about to embark on an MPLS rollout (in a hub and spoke configuration - all remote offices will connect to the main office for Internet). We have about 1400 users. Which NAC solution would be right for us: 3 500 user servers or 1 1500 user s...

I have ICMP turned on to receive replies and some of my tunnels are pingable but others give me 2 messages:Denied ICMP type=0, code=0 from tunnelIP1 on interface outsideDenied ICMP type=0, from laddr tunnelIP1 on interface outside to MyPeerIP: no mat...

I recently signed up with MXLogic to filter SPAM.They advised mt yo lock down my PIX 501 firewall to only accept incoming SMTP connections on port 25 to only IP ranges208.65.144.0/21208.81.64.0/22 How do I do this?What entries do i need to add to my ...

Hi,I have PIX 515E - IOS 7.0.1. Since yesterday I am not able to take control of PIX(Primary) through ASDM and SSH. While login into ASDM it is giving error message "Unable to luach ASDM from 1.x.x.x. Connection reset" but I can access Secondary(Stan...