Network Security

Hi,I just took over management for a PIX running 6.3 only using conduits and outbound statements.Currently, there is no Internet (or outbound) access allowed generically speaking for the dmz lan.I have two questions:What are the thoughts of allowing ...

What logging levels would be necessary to identify inside IP addresses in a PAT configuration on a pix firewall?

I set up active/standby failover between two ASA 5510s and something keeps causing this to failover approx once a week. When the it fails over it loses the vpn connections instead of handing them off. It is currently running version 7.2(2) on both....

Hello. I have this ASA with 2 context sharing the outside interface. No matter what I do, there is no communication on the outside interface. The sample topology is very simple, the eth0/0 interface of the ASA is conected to VLAN4. On that VLAN4 ther...

We have a site-to-site vpn with our London site and they need access to a webserver in our DMZ. I haven't had any trouble getting our remote vpn users access, but am unable to connect the London office to the webserver. Attached are the configs I i...

Hi.. I really need help. I have an ASA 5540 and I need to configure its outside interface to communicate with two diferents routers with ip address: 200.184.x.x and 172.16.x.x. The ASA outside interface is plugged on a HUB and the routers too. The AS...

Linux_FTP_Server---(i)Pix(o)----Linux_FTP_ClientPix is running version 7.2(2)FTP_Server: 192.168.1.2/24Pix inside: 192.168.1.1/24Pix outside: 1.1.1.1/24FTP_client: 1.1.1.10/24static (inside,outside) 1.1.1.2 192.168.1.2 netmask 255.255.255.255acces...

I am attempting to setup a windows deployment server to work through our FWSM. The workstation and DHCP servers are on different vlans on the outside interface of the FWSM. The WDS is a separate vlan on a different FWSM interface. The workstation is ...

Very new to Cisco products and syslog...Question:We have 2 devices ASA 5520 and VPN 3000 Concentrator sending data to syslog server.I'm looking to gather information regarding authentication from these devices, but the format for syslog messages is d...

One of my client has enabled a cisco 3725 series router with inbuilt firewall to send all the syslog messages to a server for analysis.I have enabled the command " ip inspect audit trial" to get bytes information in the syslog messages. I am gettin...

Hello - I have a PIX 515 in which I have a T1 line that I use for my internet access. I just added a new line and here is what I want to do:Take the internet traffic off the old line (a.a.a.a) and put it to the new line (b.b.b.b).Use the old line as...

Hi all, I have serious issue if any one could help me in this i have attached the configuration for your referenceIssue is : Can't able to access server in DMZ Zone from Internet but everything is working fine (i can able to connect) when i c...

I just purchased 2 ASA 5505. The hub site has a static IP and the spoke has a dynamic IP. I am trying to create a site to site VPN tunnel using the wizard. However on the static based ASA it is asking for the dynamics IP. Since I do not know it curre...

My firewall A will be connecte with Router A and use the OSPF.Only firwall interface that is connected with router will use the OSPF and interface that is connected with switch will have the static routes. I will redistrubte the static rotues into th...