Network Security

I am trying to configure a pix firewall 506 E SW(6.3 (5))to run DHCP server for its inside hosts. Below is the config. For some reason, hosts say they are unable to contact the DHCP server to get leases. Any help on this is highly appreciated.Inside ...

Hy i have a ASA5520 whit the SSM_AIP10 Module installd.. I can not connect to the Module via ASDM (ther is a Tab IPS) can someone help me?Thanks and salutation from switzerland..

We recently replace our checkpoint to cisco ASA. In our old firewall every tcp/udp ports outbound are blocked, ofcourse except for port 443 and 80. With the ASA we just started blocking all the ports outbound and I noticed that our DNS servers keeps ...

Hello,I should deploy a NAC solution consisting in a CAS, a CAM and a Guest Mgr to provide wi-fi guest access to an organization. Every server is a NAC3310 appliance.All components of the solution are going to be deployed entirely in an extranet area...

Hi all,Friends, i cofiged VPN site-to-site between ASA's... one side 5505 and other 5510... VPN is active, and works OK. but from 5505 inside hosts can not access internet and cannt PING as outside interface IP, as public outside IPs. static route ou...

Hi, I have make a object-group and add port-objects in the FW. Few ports are added in object group and an access list is also configured that is using object-group. Now I want to add a new port 9800 in object-group.object-group service Services tcpde...

Hi all,i've had a little problem with ASA conf in a multicast environment:so....sparse mode on all interface involved (routers and ASA) RP is router (are connected with ethernet interfaces ruoters andn ASA and RP in anycast).with ip pim bidir-enable ...

Hi, We are using pix 501 (Ver 6.3) and in which VPN tunnel is estlabished but the memory utilization is too high and CPU utilization is 1 to 2% only. The screenshot is attached for your reference. Thanks

When upgrading fwsm from version 2.3 to 3.2, is the running activation key" (multiple context) automatically imported into the new version?Or do I have to key the number after reboot ?Thanks for your helpFrancois

Hi ,I have a PIX 525 E in HSRP (active and standby mode)I have a trusted network attached to Inside interface of noth FW,I have REVERSE PROXY server which is also connected to the DMZ inteface of the both FW.Now my requirement is to give access to th...

I am reading a Cisco Press book on Securing Perimiter Routers. "Cisco Router Firewall Security" R.Deal @2005It gives an example of Auto Secure with a couple of humongous ACL's. One for example is for all Private Ip Source Addresses RFC 1918 blocked f...

Hi, We have around 100 users in our inside network. Can we restrict on downloading or assign bandwidth speed to users like in the way of divide bandthwidth. I want if user need to download then he wont able to take highter bandwidth except upto 15 kb...

Hi,I have ASA 5520 device.In that i have only one access list that is for the inbound connection from outside.Please find the access-list config..access-list outside_in extended permit tcp any host x.x.x.1 eq wwwaccess-list outside_in extended permit...