Network Security

I have a situation where I need to set up my pix to handle vpn.currently the pix only has private IPs assigned to it's interfaces. it passes a class C public though it.exampleRouter Outside:4.4.4.1Router Inside: 10.1.1.1firewall outside 10.1.1.2fire...

We have an FWSM in routed multiple context mode with two VFW's. One will be protecting dept. LANs and the other will handle servers. We would like both VFW's to handle firewalling mutliple VLANs, some will require NAT, non-routable xlated to routable...

Hello,I need help in allowing traffic between 2 interfaces on ASA with the same security level. I know that if i configure the 0/2 with the same subnet as the 0/1 this will post an error.Now, what is the better way of doing this if I want these two i...

I want to allow vpn session from remote user only if this computer domain = mydomain.rufor example:In my company i have many users who work on notebook. And i want to allow only vpn session from this notebooks.Its possible if I use this command? (vpn...

I am using virtual zones on Sun OS and experiencing Mac address table problem where two arp responses are being seen with the same IP address causing an intermittent Mac IP mismatch and resultant connectivity problem. As the table updates dynamically...

gusy i m pretty new to this....i have a question infact series of questions which relates to IpSEC....my understanding is that IPSEC (plz correct me if i am wrong) is an open standard......IKE is a negotion protocol of IPSEC......IPSEC has three main...

I have installed the LMS bundle 2.6. LMS bundle also installed the lms 2.6cisco view Version & Patch Level:6.1.2 RME Version & Patch Level:4.0.3Now i m not able to see cisco router 3825 and 2800 series routers in cisco view. I have installed the last...

HiAfter configuration of 2 ASA 5520 with active/standby failover mode, I can't access to the Internet ( or very slowly) when the CSC is active.There is no problem if the CSC is deactivate.thanks for your help

Hello,I'm configuring am ASA 5505 in tranparent mode. I'm tuning threat detection thresholds to reduce unuseful log messages.I type the following commands:no threat-detection rate scanning-threat rate-interval 600 average-rate 5 burst-rate 10threat-d...

We have a 4215 IDS in place that is identifying quite a few triggers based on Cisco signatures. It does not perform any automatic countermeasures. Right now, it is just providing information. Typically it is the same 5-10 different alerts being re...

I can ping, but not resolve names of hosts inside the firewall. I have the following settings:10.0.0.0/16 Internal172.16.110.0/24 DMXstatic (Internal,DMZ) 10.0.0.0 10.0.0.0 netmask 255.255.0.0 access-list DMZ extended permit tcp host 172.16.110.10 h...

i am unable to use some ftp commands once I have established an ftp session going through the ASA firewalls. A show conn has the following output:TCP out 199.x.x.17:0 in 10.33.64.104:2859 idle 0:01:27 bytes 0 flags i

I'm using PIX 515 Version 6.3(5). In the output from a "show access-list ....." command appears the word hitcnt followed by a number. When the number = 0 for me it means that that acl is not used. The question is : not used from how much time ? From ...