Network Security

Is there a way to block all IPs from outside the US on a PIX 515e version 7.1(1)?

I have a vendor that requires us to use public IP's across our VPN tunnel. I have two ranges of public IP's one that I can use for this tunnel and one that is used for our connection to the ISP.I currently have an ASA setup with and interal network u...

hi all,We recently implemented VOIP on one of our sites, the main callmanager is in the head office and all traffic goes through a PIX 515. The VOIP phone would get the correct IP address from DHCP but simply didnt work properly. After removing the f...

I have problem pinging from inside interface to outside interface and also from outside interface to interface. I have included sh run and sh ver command with this email. I wanted to try this simple setup first. ciscoasa# sh runASA Version 7.0(7)!hos...

Hello I am configuring subinterfaces on mys asa5540 the question I have is do I have to have a security-level on the trunk interface here is what I am referring to:interface GigabitEthernet0/2 speed 1000 duplex full no nameif security-level 0 no ip a...

I have the following static statement in a PIX 525:static (outside,dmz2) 10.97.0.1 168.117.100.20 netmask 255.255.255.255And with a sniffer on the outside interface I still see 10.97.0.1 as the SA. What is the problem?

Hi,We've got a ASA 5520. Till late afternoon today everything was working fine with the Web VPN. All of a sudden once the users get conected through WebvPN the Java applet comes up and it goes into a hang state, without any port forwarded IP's listed...

Hello,I am having 506e firewall, is there any way to block the sites(youtube,torrentz,etc) in the firewall.Thanks in advance

I have a remote site customer with a Cisco ASA 5540 running SSLVPN (Anyconnect)(8.03). It currently only serves about 450 SSLVPN clients. Since last friday, they've seen the CPU utilization go up to high 90% while only serving 400+ remote users. Plea...

Is possible to do function SDDE with IDSM-2 in Catalyst 6513 .The commands we need in Routers , bi example , are the next :ip http secure-serverip ips notify sde ip sdee .......But , in Cat6500 , woth SUP720 , MSFC3 , just permit version 12.2.sx... ....

Hello,I have setup an EZVPN connection between Cisco 851 (client) and PIX 515E 6.3(5) which is configured as an EZVPN server. Everything works OK, but the client is not allowed to save the password which is very annoying and makes the whole thing unu...

I have a firewall ASA-5510 ver 7.0 with 3 interfaces, one is connected to my internal LAN, one interface is connected to ISPs with public IP 203.27.53.112 and last is going to a router which is connected to another ISP with public IP 57.12.26.53. I a...

I can not seem to get this right. Im trying to load a new PIX configuration file to the startup config of a PIX515E so when a reboot is done, it loads the new config. This is for a ISP change at a live site. I guess TFTP would work and i could verify...

I have 4 active interfaces on my PIX 520, Outside, Inside, DMZ1BU, and DMZ2BU. Inside, DMZ1BU and DMZ2BU can nat to outside just fine, everything on the DMZ has a static mapping to and Outside IP Address. I'm trying to route between the two DMZs and ...