Network Security

Hi, I'm having an issue with NAT on a Pix 525 running 6.3.4. I have two IP Address that I'm using a static nat on, one works and one does not. Here are the static entriesstatic (inside,vpn) 63.xxx.xxx.37 10.200.100.131 netmask 255.255.255.255 0 0stat...

When configuring an IPSEC tunnel between an ASA and Cisco 871 router, we were having issues with the router passing ISAKMP phase. Thinking there was a typo in the policy we double checked the config and could not find an issue. After troubleshooting,...

Hi,I've been noticing that we've been getting an increasing amount of hits on sig 3041-0, TCP SYN/FIN packet. This is always coming from the internal network and is one instance. Has anyone else ever seen this sig being fired and figured out why? I d...

Hi,I have got a Cisco Pix 515 and just need to give my LAN access to the Internet. I will be at a DR site, so I will just be given a IP for the Internet for the outside interface, what commands would I need as I would like this config complete before...

I am looking for some recommended settings or pointers for what to enable on an Internet facing edge router (ISR). Currently the defaults have pretty much been accepted with regards to the IPS setup. The router was configured initially from the CLI a...

.

Hi can anyone explain the below. We have just installed ASA5550 ver 8.0.3 and replace a pix 525 and we are recieving these message alot[ Scanning] drop rate-2 exceeded. Current burst rate is 8 per second, max configured rate is 8; Current average rat...

Hi Due to the fact that pix520 (version 5.2(3)) is not supported more i have decided to go in ASA5550-BUN-K9 (7.1(2))I have performed one copy & paste of the configuration(including extended in my access-lists),excluding inspect esmtp (no fixup proto...

Hi,Sorry for my bad English, I'm French.I have great difficulties to understand and to modify the new firewall concept.The zone things …My router : C181X Software (C181X-ADVENTERPRISEK9-M), Version 12.4(9)T6I only want a firewall that does:Internal...

I have a question that has been baffling me all afternoon.I have an ASA appliance which I have positioned to guard my Customers network from the Internet. On the other side of him is a Border Router which is a 3825 ISR.I have an ACL extended configur...

I have configured Site-Site VPN tunnel between 2 ASA 5505 firewalls (from corporate to branch office).I Can ping both networks. I Would like to route internet traffic through VPN from Branch office to Corporate and would like to pass the traffic thro...

Hello.I'm not very familiar with firewalls, but I've inherited a network with an active/standby 5540 configuration. It looks like the 0/3 interface on the standby firewall is bad, so I recently tried to move the subinterfaces on that interface to the...

hello,is there any way to send logs to a syslog server for only a specific access-list?thanks

hi every body!Let say we have an access switch sw1 which is connected to distribution switches sw2 and sw3 via port f0/2 and f0/3 respectively.swi port f0/2 is root port while f0/3 is blocked port. Sw1 is using uplink featuresw1 has following mac tab...