Network Security

Hello,I have to setup two port redirections on our PIX. I need this two redirections:Outside-IP 212.6.1.1 to SSN 10.10.10.2for port 443 (HTTPS).Outside-IP 212.6.1.1 to SSN 10.10.10.253 for port 23 (Telnet).The access should be possible from any sourc...

I currently have a 3725 + the NM-CIDS module doing my firewall / IPS / VPN.I'm considering upgrading to a ASA 55xx box. I was reading the product page, and it does not seem that I can have one ASA box that does both the IPS with an AIP-SSM-xx and the...

Greetings,I have been able to setup failove for two Cisco ASA devices and they seem to be functioning- used two physical Interfaces, one for LAN and one for State as those resources were not needed for DMZ or things like that.Now, My question migt re...

Using DefaultL2LGroup tunnel-group, I am able to bring up a L2L tunnel from an IOS Cisco871 hub that is dynamically addressed to a static spoke ASA running 8.x. Authentication is via PSK. How can I use a tunnel-group other than DefaultL2LGroup? It se...

Hi,I need to add a user to my ASA, but at a very limited level, but just realised I have no idea what the 15 levels are, can you help?Thanks

Hi all,I need to configure an inbound nat rule on a PIX firewall so that a network that comes in through a VPN on the outside interface translates to a dmz interface (PAT).I have the configuration in place to setup all the translation rules without t...

I have tried adding an additional Ethernet card (PIX-4FE-66) on to the PIX 535 firewall cluster running software Version 7.0(4). Firewalls are running in active/standby failover mode through a dedicated LAN cable.After shutting down and disconnecting...

I have clients running Exchange Server 2003. More than one of them are plagued by (presumably) scripted attempts to log in to their SMTP server, using a long list of common American names. Please forgive what is undoubtedly a basic question--but can ...

Hi allWe are finally getting round to upgrading our Pixes (ver 6.3) to a newer version. We have been happy with ver 6.3, but are after new features, especially QoS.Is 8.0.3 stable enough for production? What are the major differences between 7.2 and ...

Sir, Please let me know content filtering feature is supported by CISCO ASA5505-UL-BUN-K9. If not supported what do we need so that content filtering is to be used on above ASA device

Dear All,I need your advice and recommendation related to the ASA and IPS versionI am going to have more then a half a dozen ASA-5510(Baseline) with AIP-SSM-10 implmentation in next 2 days.Which ASA version is recommended from CISCO version 7.x or Ve...

HiI am trying to establish site to site vpn with ASA its giving me errorMay 26 01:49:19 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, Information Exchange processing failedMay 26 01:49:21 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, Information Exchange process...