Network Security

folksi have an internet facing 2600 router in front of a 515 pix clusterthe 2600 nats incoming traffic from ANY host to an internet routable address (destination port 25) and routes it to an internal mail serveri can see the translation table and the...

I have a strange problem when using the VPN Client over a WLAN. A customer runs a public WLAN and allows its users to establish connections with the VPN Client to a 3000 series concentrator. The customer is a university and has a lot of mobile device...

I have configured FWSM as inter chassis Active Active failover. The failover works just fine only for 10 mins before both context on both units shows active and peer context as failed.I am not sure what the issue is. The failover and Stateful Vlan ar...

Is it possible to use more than one hub with a DMVPN WAN design for the purposes of resilience? Failing that, can two IP addresses for the hub be specified on each spoke?This is only a small network comprised of about 10 spokes with ADSL and a hub w...

Hi,We've recently migrated on to an ASA 5520 from a Nokia Checkpoint. On the checkpoint when you were watching traffic on the GUI, it had the ability to do lookups on the outside IP address and display the host names in the log. For instance, you c...

Hey alltwo pix 525s. One on each side of a t1. Set up looks like this:Pix---Router---T1---Router---PixOne of the routers is set up with a private address on the inside (which then connects to a pix on a private address). How do I get that pix to s...

I have been trying to get RPC over HTTPS working through the ASA 5510 by NATing port 80 and 443 to the internal Exchange 2003 server. I am able to connect to the server via Outlook 2003 when it is outside the firewall but not when it is behind the fi...

I'm looking to deploy an ASA-5510 as our internet firewall. We'll be using a DS3 coming into a Cisco 3845 router and we want to service 4 different, NATed networks. My question is, can the ASA-5510 with a Base license service the needs of all three...

Hi,1)For Router ACL, to permit routing information updates between R1 and R2, if R1 has an inbound ACL, for EIGRP, is the following enough?(R1)permit eigrp host R2 host 224.0.0.10or do we need another line(R1)permit eigrp host R2 host 224.0.0.10permi...

Hi to all I'm new to work with cisco firewall and i have many doubts about it. I have a cisco asa 5510 with antispam module , i want install it in my lan that already has a firewall . the new configuration of my lan (installing the new cisco asa 5510...

I have an DSL router connected to a central site via a GRE tunnel. The tunnel is encrypted by IPSEC and works fine.- cisco 836 IOS version c836-k9o3s8y6-mz.123-2.XA6.bin- DSL 7550kbps/864kbps- ipsec encrypted gre tunnel- ipsec tunnel modeI'm trying t...

Hi people,in a 5510 ASA I need to install some public servers in DMZ interface, some of them need to get access to internal network, however, I put a static and the access-list to do that, but logging says theres not translation between them (DMZ and...