Network Security

i'm using Paessler's Traffic monitoring tool to check on my equipment and was wanting to monitor a line coming out of our ASA. the problem is that i cannot ping the ASA outside interface. And i'm pretty sure it's an ACL issue.has anyone configured a...

I have an ASA5520. It's been running fine with my one ISP, about 3 one to one NAT's and PAT to one outside IP. My question is, i recently added a second ISP that is going to used for one subnet on my LAN. What i did is treated that one subnet just as...

I have a FWSM, recently upgraded from 3.1(2) to 3.2(4) in our 6513. I have started to notice an issue when uses try to authenticate through the firewall to access servers on our network.the authentication session is started via HTTP. The issue aris...

I upgraded this asa to code 8.0(3) and I have been seeing this error. NO translation group for icmp src outside:publicIP dst:NOC:insideIP (type3 code4)to me it looks as if the outside interface is trying to ping a box on the noc network. Why would i...

Hi AllPlease help me out with this .I am getting attached IDS Event viewer error while trying to install it .Please let me know the probable causes and how to rectify the same RegardsAnkur

I am setting up my dmz area on my new 5520 and have the outside to dmz nat for a webserver working properly. However Im having trouble understanding what needs to be done for reaching that webserver on the inside. Reading of inside to dmz nat, identi...

So when you use the "filter url exception" command, does the firewall still inform the Websense server of the URL and just allows it out. Or does the firewall totally not report on URLs from those addresses to Websense?

Could anyone advice, if I have database servers subnetwork behind an ASA5520 box, (application servers do not behind the ASA5520), what rules I need add in, basically?what if the servers are unix server and what if the servers are window server?Any c...

How i can setup VPN banner on PIX 6.3(5).

Hi all. We initiate an outbound FTP session with a bank. We receive an error :The remote host actively refused the attempt to connect to it". The bank stated that we need to open port 6100-6199 in order for this to work. This sounds very excessive...

Hi,I have configured webvpn as well and ipsec client vpn on asa 5510 7.2(3). I want webvpn to be enabled only for selected ids, at present all ipsec client vpn users are also able to login to web vpn.Gaurang.

My question is, if it is possible to establish a VPN having of the side of the client a Cisco VPN Client and of the side of the Server a Checkpoint VPN Server, these are compatible?