Network Security

can firewall pass spanning tree traffic?can it participate in spanning tree process when it works in transparent mode?

I have a PIX 515E, power went out over the weekend and the UPS went down also, I came in this morning, I try ping the firewall and it fail, when I reboot the PIX and connect to the console this is all I get from it. CISCO SYSTEMS PIX FIREWALLEmbedded...

hi, Does an inline mode necessitate configuring inline interface pairs.?Rgds.

Hi,Would like to is the possibilty of blocking completley from a range of ip addresses in a vlan.Design is something.ASA-->Switch (L3)---->Internal users in diffrent vlans.All the Vlans are on L3 switch.something like vlan1 on192.168.1.0/24,vlan2 on ...

I have quite a few tunnels set up on two different 506's.A problem occured today out of the blue.Site A has 9 VPN tunnels on it. Site B has 9 vpn tunnels on it. Site A can ping to 8 out of 9 hosts on the different VPNs, and Site B can do the same, ho...

Hello, in the IPS Event Viewer I see a lot of messages regarding 'Squid Proxy NTLM Authenticate Overflow'. For a lot of them, the destination ip's are as expected: they point to the addresses of our Proxy servers.However, I also see a lot of packets ...

Hi,I am looking to map one of the internal host to public ip.Statically natted the internal ip with public ip.somehow no luck accessing the host publically.inernet working perfectly with PAT.Find attached the running config and suggest what all i am ...

I have two unrelated questionsbackground: I am running an asa 5505, 8.0.4, using direct LDAP for vpn authentication. no radius or tacacs+ server1. in regards to IM inspection, I have been able to configure my ASA to filter based on a particular user ...

Hi All,I need to configure IPS module on ASA 5520.I have assigned ip address to the ips module but not able to access it from the asdm.

I have been messing around with some of the application awareness features on my asa 5505(for example recognizing a certian username of IM sites), and was wondering if this type of functionality is available on the PIX line, espeically if above 7.0 o...

I have a Catalyst 6500 with an ACE and Firewall Service Module (FWSM) installed. See Diagram.The server sits in VLAN 10 which is configured in both ACE and FWSM. The server load balancing is configured in DSR mode (Direct Server Return) which means t...

My ASA reloaded and now gets stuck at Loading Boot Loader... when booting. i tftp'd an image to the asa in rommon, but while its booting i see that it failed to mount disk0: (the flash). Once it is completely booted a dir disk0: show that disk0: has ...

Hello all,I'm looking for the way to download user profiles for ASA (both IPSec and SSL) from LDAP server.Quite similar to what it's possible to do with RADIUS ip-acl and webvpn-acl attributes.Authentication works, I just need to limit access per use...

HI,I do have 2 ISP terminating into Cisco PIX. I do have internal server in LAN zone. I wan to do natting the private ip of the server with 2 ISP's simultaneously. Is this possible?