Network Security

hi, I currently have a PIX 506 in a test environment and am trying to come up with a solution for the following. I am trying to use NAT in a rather unorthodox way.two networks, 10.5.1.0/24 on the inside and 172.26.224.0 on the outside. The PIX 506 ha...

I want to use my Windows Mobile phone to connect to an ipsec tunnel on an ASA. What client would I use to do so? The Tunnel uses VPN Groups

Hii need to know if the ASA 5510 support Active/Active feature or not ????please advice regards

hi all can someone just advise which is a better solution the nac appliance or the nac framework. regardssushil

HiI created site-to-site vpn between asa and pix with no sysopt connecion permit-vpn.I used interface access-list to control what remote site(PIX) can access to main site(ASA).IPSec connection is up and everything is working fine.I have question rela...

I have an ASA 5520 with an SSM-10 module.ASA is running 7.2(2)10 and ASDM 5.2(2)The IPS is running 6.0(5)E2I want to upgrade the IPS engine to 6.1(1)E2Is ASDM 5.2(2) compatible with this?Thx,Greg

I have a PIX525 running 8.0(3) with 256MB RAM & running Restricted License.When i use OUTSIDE Interface NAT the NATing works fine.But when i user any other Global IP for NATing it's not working.Pl. help.

I have a unique requirement for my ASA PAT configuration...By default a Cisco router running IOS will utilize the SAME port when creating a dynamic PAT. i.e. the inside hosts request, generates a dynamic PAT, where the requests source port, is the po...

Hi,I have an ASA 5505 ver 8.2 with inside network 192.168.20.0/24 and 192.168.20.254 configured on inside interface.Also I have an outside interface 10.10.10.1/24 with default gateway 10.10.10.254 assigned on ethernet of router.On configuration I hav...

I have a unique problem. I lock myself out of the pix on any interface via ssh,telnet etc . I'm trying to connect directly but logging console is enable and the amount of logs makes it impossible to do anything. any ideas on how to stop it other than...

If a default action on a specific signature is configured to "produce alert" only, why is it that the IPS will also Log packet from the attacker? I would have thought that this would have required that the action "Log attacker packets" be selected as...

I am setting up a VPN tunnel between two sites and I must be able to pull DHCP addresses across the tunnel to my client devices. At the remote end I have a DSL router in bridged mode connected to a ASA firewall. My client devices are connected to a 3...

I have to do password recovery for IDSM-2. I have read the document available for password recovery. It shows that i have to re-image the IOS because i am unable to log into IDSM-2. Will Re-image will disturb the normal communication of the switch an...

Running 6.0.5 E2Sig release S342 contains a new signature (6964 - Asprox injection attempt). I want to tune the signature but can't find it in the signature definitions (sig configuration) section. In addition, I can't find this signature in Cisco's ...