Network Security

Consider the following Phase 2 parameters of a VPN .The issue is i need to give clear text access-list too along with the normal Crypto ACL and NONAT ACL .Iam not able to find out the reason for the same crypto map outside_map 140 match address outsi...

Hi, In my office one new IBM AS/400 server is installed.The server internal ip is nated with public ip and opened 6013 port.The server applications are fast through local LAN but it's dead slow when it is accessing through internet by the outside use...

After issuing the command copy tftp flash on the secondary PIX it is showing on the tftp server that transfer of the image completed. But on the session output of the pix is showing nothing like "image install". When try to reload the pix giving the ...

Hi AllWe are having one ASA5520 , ASA Version 7.2(2) (AIP-SSM Module integrated , IPS in Inline mode) which is the internal firewall . Behind it there are various VLANs where all the users sit . ASA connects to perimeter which is Checkpoint firewall ...

Greetings,I'm having a problem with turning off Proxy ARP on the DMZ interface of my firewall. Right now I have 2 DMZ's and i'm trying to turn Proxy ARP off 1 of the interfaces. The reason i'm doing this is that we just recently upgraded our Citrix e...

Hi,I have configured FTP server in my local server and nated the ip in the ASA and also given inbound access.Now the problem is i am able to access FTP through command from outside(NATed IP) but it's not accessable through web. ftp://x.x.x.xFrom insi...

New ASA, was made "config factory-default"Then I set to Ethernet 0/0 192.168.164.56/22. But when I tried to ping it "ping 192.168.164.56", I've got "No route to host 192.168.164.56". What's the problem?------My running-config:ciscoasa# show running-c...

Hi,How do you configure the primary unit to be the always the active FWSM when both the primary and secondary units are up (after a failover to the secondary)? According to the Cisco website, the command "Failover preempt" on the primary unit should ...

Hello,I have configured admin context on my FWSM as transparent FW with vlan 911 being the outside and vlan 11 being the inside interface...I have created both inside and outside ACLs to be permit icmp any any and ip any any but somehow hosts on the ...

Total noob...My laptop can establish a vpn connection to a site when I am at home. Bring it to work, it can't establish thru the 5505. Can you tell me what I need to enable so I can VPN through it? I have searched and tried different things to no ava...

Does the SAS 5505 support this:In order to 'upgrade' the ISP's upload speed (800k) is it feasable to just install a second modem (with second line and fixed IP of course)and load balance? or maybe connect VPN from 2 branch office on one and another o...

I have a Cisco ASA 5520 with a DMZ and an inside interface. The security policy is setup to permit IP ANY from host on DMZ to host on inside. The host on the DMZ is initiating communication on UDP port 2114 which is a challenge response authenticatio...

How do I migrate configurations from ASA5520 to PIX515E.

How many network objects can be in a Network Object Group, current have 1023 and may need to add 1123 more, thank you.

I am currently running Cisco IPS 4260, CS-MARS v4.2, and CSM 3.1.0.I want to create a custom signature in all my IPS 4260's which monitor activity from and to several external IP addresses and have it send an alert to my MARS device. How can I do thi...