Network Security

I am going to be doing a very significant number of config changes to a production Pix 525. This includes removing entire access lists, some objects, shutting down some unused interfaces, adding some new object groups, removing some access list entri...

I have a site to site connection setup between an ASA 5510 and a PIX 501. I have the ASA's inside 10.1.1.x network being able to access the PIX's 10.2.2.x network. That is working fine. However, I need to be able to access both the ASA and PIX's outs...

Does the ASA 5510 allow you to static NAT and external address to more than one internal address?For example, if host A is not available, the NAT from outside in will go to host B?

I need to install two ASAs, one with AIP-SSM module and other with CSC-SSM in the same network. Is it possible? If so how can i connet the two devices together.

Hi Folks,I'm working with a customer that has a number of ASA's running 7.2 code. They would like to try out the new 8.0 code for SSL VPN on one of the firewalls. Has the 8.0 code been stable in production environments? My gut reaction was to reco...

Hi I have a pix connected to 2 remote sites (1 & 2 vpn 3000 concentrator on both end sites) I would like to configure the PIX having a principal server (site 1)and a secondary server (site 2)in case principal tunnel fails the second become activeIf p...

I'm really hoping somebody can help us. I can post configs if it helps but our issue is this... Once a call is initiated, a tunnel is created between the two devices using EasyVPN. HOWEVER, the tunnel times out... ALL WE WISH TO DO IS TO MAKE SURE ...

Hi allI have 3 servers in my dmz,I have to add two more Servers in my DMZ with new Public IP addrss which is different from other server's ip.Please advice me the solutionThanks

Hi, I'm running into a bizzare issue that i cannot pin down.If i try to access www.nmh.org from outside of my PIX, it works fine. If I try from inside the PIX, reliability is about 5% that the page will ever show up. The website is pingable from...

Hi,I want to run my PIX as a DHCP Server for all PCs to get their IPs from.I want these PCs to PXE boot and recieve a OS and config from a tftp server.To do this i need to specify options 066 "192.168.x.x" and 067 "bootfile name" in dhcpCan i do this...

what advantage is their from a security point of view of configuring NAT.