Network Security

Please see my config below. I have 2 site to site VPNs setup and a pool of Remote VPN users. The site to site VPNs have overlapping private network ranges (192.168.1.x) with my private range which I use for both the hosts that site behind my firewa...

I am reviewing a PIX configuration and there are some interesting nat/global statements that I wanted to clarify. NAT ID Set 1global (inside) 1 insideip netmask 255.255.255.255nat (dmz) 1 dmznet1 255.255.240.0 0 0nat (dmz) 1 dmznet2 255.255.0.0 0 0na...

I have an ASA 7.2(3) with public IP mapped to internal Windows Exchange server. This is how MX record in DNS created. All internal traffic (including email) to internet goes out different public IP.There are email servers performing anti-spoofing c...

Hello there,Does anyone know how to decode/extract the pre-shared keys for the tunnels using either: ASDM 603 or the CLI on PIX 5520?Please shoot.Thks.

We currently have PIX 525 firewalls with one DMZ 4-port card installed. There are 4 different public web servers connected to the ports. We are in the process of upgrading to the ASA models and had some questions about design layout. The number of pu...

I have two asa 5520. I want to put them in a failover configuration, but there is a problem because only one of them has an IPS module. Is there a way to solve this issue ?

Hello - I have a PIX 515 (v 7.2) and a ASA 5520. I have a VPN tunnel built between the 2 but I can not get them to connect. All I get are these messages:Jun 06 08:43:13 [IKEv1]: IP = x.x.x.x, Error: Unable to remove PeerTblEntryJun 06 08:43:46 [IKEv...

Hello everybody,I am a bit new to cisco routers but not to routers in general (i used to work with zyxel, fortigate and dlink). My question is about an Cisco 857 which i manage by SDM 2.4 interface.It is about firewall. In tab "aplication security", ...

I have ASA5520 with AIP SSM 20 and I am using IPS Manager Express. For how long can AIP keep IPS events? How can I save events before the logs are recycled? Thanks in advance

Hi all,I have a question about the network objects on an ASA running V 8.0(3). After creating an network object with the corresponding netmask in ASDM I cant see it via CLI. Thers just the name without netmask. Where is the netmask stored? How does t...

HiWe have a FWSM running ver 3.1(5). We are running into memory problems on one of the contexts/partitions. Apart from using the resource acl-partition <number-of-partitions>command, is there any way of manually reconfiguring more memory to the parti...

Is there a way to log Remote Access VPN events on ASA

I've just purchased this model including the security plus license. The running ASA version is 8.0(2). The ASDM correctly shows the Security Plus license, as well as the new 100 VLan Max.I am unable to turn the ethernet0/0 or 0/1 ports to 1000. ...