Network Security

I have used nat0 command to transfer outside ip address directly to inside users.But whenever my pix reboots nat (Interface) access-list 100 command erase automatically& i will have to reconfigure it every time by changing access list name .Please gu...

Hi,I have an admin context with several firewall contexts. I am in the process of renaming a few vlan names. I can rename the vlan names in the individual context by giving "no nameif" and then "nameif".But how do i rename them in the admin -vfw sinc...

Hi, Kindly find the attached file.In that i can ping from DC network to F3 network. but i m unable to ping s1 from DC.i can ping s0 from DC.the same way i can ping DC network from R1 router.but from R2 router unable to ping..For that i have checked t...

Hi folks.On my ASA 5520 I have an interface that connects to a layer 2 switch for DMZ servers. I regularly get the syslog below whenever the DMZ servers send out a broadcast (which is, of course, quite often.) What's the best way to make this message...

I have the IPS set to promiscuous mode. Have a policy map set don't see it doing anything I get no reports or logs I see no traffic on it.How do you know what it's doing? or get it to do something?I don't even know what questions to ask as the docume...

Hello,I'm using ASA with SSM-10 module for IPS.When trying to access with ASDM to the IPS it tells me that there is no license included, unless that the IPS works normaly. and also when checking for IPS licenses I found nothing.They told be that I ne...

Does anyone know how to be able to copy run tftp from a transparent context to a share-server? We have routed contexts which I can copy the configs all day but since there is no IP we can't do this. I've tried adding a BVI to the context but no luck....

We are running Active Directory and this sig is firing 30000+ times a day. I do not want to disable the sig as we would likt to watch for external IP's as the source or destination.Trouble is I cannot get an event filter to work for this beast and I ...

Hi, I have a few questions on load balancing OUTGOING internet traffic through the ASA5540 firewall running code version 7.2. My company has 2 internet links going to the same ISP and the firewalls are running in active/standby mode. I would like to ...

I have a PIX 515E running 6.3(3) that has one mail server currently running behind it with the following ACL: access-list 100 permit tcp any host xxx.xxx.xxx.xx1 eq smtp access-list 100 permit tcp any host xxx.xxx.xxx.xx1 eq pop3AND the following sta...

Hello:Could someone please direc me to a link (if there is one) to find out what are the TCP/UDP ports required for Microsoft Active directory 2003 and Exchange 2003. I am trying to configure FWSM to allow these traffic to the Server VLAN from User V...

How does the ASA handel the IPS when a failure occures with an ASAs that are in an Active/Standby state.

I've setup an ASA 5510 to authenticate using Native RSA authentication. I can test through the CL and it works fine. I can't, however, figure out how to make this work with the WebVPN. Anyone successfully used authentication other than some form of I...

I have a Cisco ASA5510 and a server that has Intel PROSet for Wired Connections loaded in an Adaptive Load Balancing mode. When i place this server behind the firewall, everything works fine. However, when I place a rule in the Access-List and a Stat...