Network Security

HI Friends,Need some help. This is the scenario.Local Machine -> Pix -> Cisco Routers farmI'm not able to ssh and telnet my routers from behind pix. The routers are placed in the PIX outside zone. SSH and Telnet is permitted and I even enable TCP Any...

Hi All,topology looks like this:inside -- pix -- outside | | dmz Pix version is 6.3.(?)For example I disable translation on dmz interface: nat 0....Does it work if i use static command to make a translation rule between...

Hi All,Need some assistance in ASA 5540 with OS 7.2 as a DHCP Server.I have created subinterfaces on the firewall. I want the firewall to act as a DHCP Server which assigns different ip addressess to different vlan (Voice, Video & Data). Is this poss...

Have two lans, connected over vpn tunnel. Inside is 192.68.1.0 and 2.0, connected and NAT exempt - all is fine.Want to add dns services in both ends, however due to the NAT exempt, dns replies are not dns-rewritten for the "other" net.In more detail:...

I have a question maybe someone can answer:Currently a PIX running 6.3(5) will work with Microsoft NLB running in unicast mode because it won't reject arp entries that are multicast ethernet with a unicast ip entry. All flavors of cisco routers I kn...

Hi,I am working on closing some any/any traffic through our fw, but I have a doubt regarding the syslog message. What is the meaning of the "NP Identity" shown below?Dec 26 07:14:28 [aaa.aaa.aaa.aaa.2.2] FWNAME %ASA-6-302015: Built outbound UDP conne...

Hi,Please let me know if there is any rule where in the number of users subjected to NAC can be estimated, like capacity level for the NAC applaince.Appreciate your comments.Regards,Amol.

Hi allI'm trying to find the best IOS software to run in our DMVPN environment.One of the features that we want to implement in our network is the "Shortcut Switching Enhancements", but I didn't find it in the "Cisco Feature Navigator". Why ?Thank y...

Hi,Merry Christams and Happy New year!Need kind help to get the steps to Install Ciscoworks LMS 2.6 on Windows server. Thx.

Hello all,I am trying to install a new ASA appliance in the position of a PIX 515E. Everything is the same but I have decided to configure all DMZs in the same Gigabit interface via VLANs.The problem is that when everything is connected, i have no pr...

Hello, we have several CAS applainces some running in-band and some are running out-of-band with 2 CAMs running in a failover pair. My question is if we were to have a failure of some sort with the entire NAC infrastructure and have to reach out to ...

Hi!My task is to measure the amount of current connections on ASA. I.e. I need to see output of "sh conn" for the period of time. I know that MARS can show "total new connections" (through the syslog messages like "built ... teardown connection") but...

Hi,I want my ASA be the DNS server of my PC. So i configure that on my PC, And on the ASA, I enable DNS lookup on inside interface, and I indicate the IP adress of my ISP to the ASA. I want The ASA forward DNS requast to the ISP DNS. But It doessn't ...

We have a Cisco ASA 5505 that we want to get connected to our ISP. We usea Cisco 837 series router in bridge mode to pass the PPPoE traffic from the ISP to the ASAand viceversa.The thing is we are unable to have the PADI answered. We have even tried ...

I am trying to change the IP of the management interface to 192.168.0.1. When I do that I can no longer run ASDM.