Hello, can anyone tell me how to disable icmp on my outside interface? I have tried everything i can think of and it is still replying to pings. Any help would be greatly appreciated. Thanks!
Hi,I have a question related to how PIX/ASA firewalls maintain UDP session information. My understanding is that when there is a UDP connection from a lower to a higher security zone, the UDP server (e.g. DNS) in the higher security zone responds to ...
i have 2 questions1. how can i prevent chatting on PIX 525.2. who can i rest the enabled password of PIX without changing the entire configuration.best regardsthaar
Hi,As I knew when we discover devices, it will discover all the devices config and overide the previous copy in CSM DB. Can we SELECTIVELY choose only one device to be discovered ? Otherwise afer discovered we need to re-deploy all again. Reason is 1...
When adding hosts to a group, for example, does a SQL Server get both SQL Server Group and Servers - All Types assigned or is the SQL Server Group good enough? Also, is it best to use the default group or clone the group/s?Thanks,Adam
Hi everyone I have a quick question I have a pix 515E with an inside and outsdie interface already I'm trying to add another inside interface. I've added the ip address to ethernet2 intf2 of 192.168.50.50 and the other end is a 2821 and its ethernet ...
Hi Everyone,Need to confirm this issue.I have PIX515E with version 6.3(4).We have configured this PIX as VPN gateway and also Lan-to-Lan VPN.The issue here is that the VPN client subnet need to talk to subnet over the IPSec tunnel as well which I bel...
I have a ASA5505 configured with PPPoe/ADSL and one fixed IP address on the outside. I want allow port 443 to an inside host using the static command and port redirection for OWA on exchange. I have setup the ACL and static map but get the 3-710003 e...
I have seen a lot of people post actual log messages/error messages from their firewalls to aid in troubleshooting. How do I enable that to be able to do it? I have a PIX 6.3(3) that I need to see port traffic as it passes to figure out what my con...
Is there a command on the ASAs similar to the show ip accounting command found on IOS routers? Something showing source, destination, packets and bytes pertaining to those source/destination connections that accumulates?thank you, Bill
I created a LDAP server Group. When adding a server in the group, I have configured several different options and after I apply the options and test the connection I always get the same error "Authentication rejected: Memory Error". I do not know whe...
i created an alias for my dns server in our dmz and now we cant rdp or ping the server via its internal ip? im thinking the acl coming in from the outside to the dmz isnt allowing our access internaly. the dns server is still working normally.thanks ...
Hi,I am unable to add a 4200 series IPS sensor to the CSM database. It passes the connectivity test but at the end it says failed to add device and gives the following error "unable to get os version from device or configuration file".I have not had ...
Say you have three interfaces on a firewall such as a PIX. Two of the interfaces are WAN links, (broadband internet access, different ISP's) and one is your LAN. The LAN interface address is what your LAN uses as its gateway. What determines which ...
Hello,I have a problem with VPN configuration of our PIX Firewall.We use this configuration:PIX 515E (3 interfaces) running the latest 8.0(3) firmware.We are using an L2TP IPSec VPN with certificates from our Microsoft CA and using the native Windows...
