Network Security

Hi,I have pix firewall 535 with IOS 7.x version. I have enable it with no-nat-control, to my understanding with this no-nat-control traffic from higher secuirty level to lower secuirty level allowed if there is no access-list. But from low to high st...

When troubleshooting firewall issues I usually run term mon, let the log run for 30 seconds and then stop it capture the output into notepad then do a find for the IP/subnet I am interested in. This is surely not the most efficient way of doing this....

Hello:I am trying authentication on MARS is through AAA server. It seems users cannot do it due to license. The MARS' license is Local controller monitor license key, what is the license i should install?, what type of license exist for the MARS?.Man...

Hi,I have recently replaced a netgear firewall for an ASA5505. Below is my config. My problem is that when I browse the web from my linux box, anytime I hit a new site, it seems to take about 30 seconds to a minute to do the lookup before I can actua...

Hiwe intend to use asa5510 ips edition as firewall and ips ,anybody know if asa 5510 ips edition support high availability also ?regard

We're about to get an IDS system which will require a spanned port on the inside of our network. Inside our network we have a few 6500's so I'd span a port on one of our core switches...my question is, there is definetly more then 1GB of traffic goi...

Greetings:We have an ASA 5505 with Security Plus Bundle. I need documentation on how to setup the ASA to allow me to use my T1 Internet connection (which is currently functioning) as my primary Intenet connection and my secondary DSL line as a backup...

I have a customer with a PIX 515 running 6.3. They have an appliance running a web server and they allow port 80 to a public IP. This is working but they want to log the actual IPs being used to access the web server. They have this currently:acce...

Hi,I'm designing a new network on which several clients of ours can outsource their server systems. I would like to use the Security Context feature of the ASA for this design, so I can seperate the firewall function for each client and give each con...

I have configure my 3750 switch for span. In this switch my IPS 4255, Internet router and Pix firewall is connected.Below mention is the span configurationmonitor session 1 source interface Gi1/0/1 - 3monitor session 1 destination interface Gi1/0/5no...

I get a lot of 'TCP SYN Host Sweep On Same Dest Port' events on my network that I want to filter out. All the events with destination port 0 are false positives since this is normal behaviour for many operating systems when starting a connection.Unfo...

Can't ping devices on the Internet from the inside interface, only from the outside interface. Also from a workstation that is plugged into port E01 through E1/7 on the ASA can't ping devices on the Internet (I can brows the Internet from a workstati...

Hi AllI am trying to configure SSL VPN I have attached my configuration. I guess missing NAT exemption and route inside. How to allow VPN users to access internal network? What Access-list I need to set for that? Please HelpThanks

I have a 1.x network and 10.The 10.x is behind a 1600 rotuer and all the rules are open to access the 1.x network, but I cant access the 1.x network from the 10.xIs there anything missing on the pix side the 1.x network that could be stopping access ...