Network Security

Could anyone advice, if I have database servers subnetwork behind an ASA5520 box, (application servers do not behind the ASA5520), what rules I need add in, basically?what if the servers are unix server and what if the servers are window server?Any c...

How i can setup VPN banner on PIX 6.3(5).

Hi all. We initiate an outbound FTP session with a bank. We receive an error :The remote host actively refused the attempt to connect to it". The bank stated that we need to open port 6100-6199 in order for this to work. This sounds very excessive...

Hi,I have configured webvpn as well and ipsec client vpn on asa 5510 7.2(3). I want webvpn to be enabled only for selected ids, at present all ipsec client vpn users are also able to login to web vpn.Gaurang.

My question is, if it is possible to establish a VPN having of the side of the client a Cisco VPN Client and of the side of the Server a Checkpoint VPN Server, these are compatible?

What is the latest PDM that can be used to fix this known issue? I'm currently running:Cisco PIX Firewall Version 6.3(5)Cisco PIX Device Manager Version 3.0(4)

We are setting up an ASA5505 with security plus licensing to provide trunking to a catalyst 2950-12 switch. We got the trunking up and working, which passes two vlans, but we cannot get routing to work between the vlans. We have enabled same-securit...

Hello,My questions:Can I add a static NAT translation for a nonconnected network? So following interfaces are on ASA:Outside: 10.10.10.0/24DMZ: 10.10.20.0/24Inside: 10.10.30.0/24 also behind the inside interface there is 10.10.40.0/24 (no interface o...

Hello, we are considering an FWSM but aren't sure how it will integrate into our network... Our core consists of a 6500 divided into approx 6 vlans... 1 Vlan for a residential network, (Further subnetted at the access layer) 4 vlans for an administra...

I am having a problem with IPSec tunnel between sites A and B. Site A has PIX with 8.x code and SITE B has an ASA with 7.2(3) code. The Crypto access-lists are as under :SITE A has :access-list 119 extended permit ip object-group Support_DMZ object-...

In a NAC OOB environment, using Catalyst 3750s (IOS 12.2.25) with MAC notification, an end user can attach a switch or hub to their Cisco IP phone, be authenticated by NAC and then additional PCs can attach to the hub and gain access to the network....

I am running FWSM Firewall Version 3.2(3). I am trying to copy the contents of my capture buffer so that I can look at it with Wireshark. The documentation states that you can use the pcap keyword for this. I cannot get the firewall to recognize said...

Hi,We are trying to build a security zone with 4 firewalls and a physical dmz.fw 1 and fw 2 are on the left side, then a 2 switches and 2 microsoft firewalls on the right side. All are supposed to connected redundant to each other. fw 1 and fw2 are...

Hi all,One of the Customer is planning to buy ASA 5510.He has a central site with Internt leased line with static IPs.There are multiple branches with Internet Broadband connectivity.For IPSec-RA (Remote access IPSec), do remote site PCs need to have...

pix 515 os 6.1 32m ramCan I and should i go to 6.3Also can i jump right to 6.3 from 6.1Thanks againBill