Network Security

Hi all,i recently have implemented the new zone-based firewall on my CISCO 1841 with 384MB memory, advipservicesk9-mz.124-15.t3 IOS image, HWIC-1ADSL and HWIC-AP-G-E Network cards. In order to avoid any possible latency introduced by the firewall dur...

Hi there,I have 2 ASA 5520 running 8.0.3 in a failover configuration. I'm not great with the CLI so I tend to use ASDM most of the time. A while ago I did a backup of our configuration and noticed that it was 5 Mb! Previously it has been well below 1...

I need to set up a static NAT for a surveillance camera on our network, so that it can be viewed as a demo to some people. camera ip: 10.8.xx.xxx 255.255.255.0public ip: 64.207.xx.xxx I have just started dealing with a PIX so any help would be apprec...

hiPlease let me know if i want to configure IPS in such a way so that the certain packets coming to firewall , routers (in the same or different network)gets blocked according to "Blocking devices " facility by specifying a certain ACL and that actio...

Hi, I'm having an issue with NAT on a Pix 525 running 6.3.4. I have two IP Address that I'm using a static nat on, one works and one does not. Here are the static entriesstatic (inside,vpn) 63.xxx.xxx.37 10.200.100.131 netmask 255.255.255.255 0 0stat...

When configuring an IPSEC tunnel between an ASA and Cisco 871 router, we were having issues with the router passing ISAKMP phase. Thinking there was a typo in the policy we double checked the config and could not find an issue. After troubleshooting,...

Hi,I've been noticing that we've been getting an increasing amount of hits on sig 3041-0, TCP SYN/FIN packet. This is always coming from the internal network and is one instance. Has anyone else ever seen this sig being fired and figured out why? I d...

Hi,I have got a Cisco Pix 515 and just need to give my LAN access to the Internet. I will be at a DR site, so I will just be given a IP for the Internet for the outside interface, what commands would I need as I would like this config complete before...

I am looking for some recommended settings or pointers for what to enable on an Internet facing edge router (ISR). Currently the defaults have pretty much been accepted with regards to the IPS setup. The router was configured initially from the CLI a...

.

Hi can anyone explain the below. We have just installed ASA5550 ver 8.0.3 and replace a pix 525 and we are recieving these message alot[ Scanning] drop rate-2 exceeded. Current burst rate is 8 per second, max configured rate is 8; Current average rat...

Hi Due to the fact that pix520 (version 5.2(3)) is not supported more i have decided to go in ASA5550-BUN-K9 (7.1(2))I have performed one copy & paste of the configuration(including extended in my access-lists),excluding inspect esmtp (no fixup proto...

Hi,Sorry for my bad English, I'm French.I have great difficulties to understand and to modify the new firewall concept.The zone things …My router : C181X Software (C181X-ADVENTERPRISEK9-M), Version 12.4(9)T6I only want a firewall that does:Internal...