Network Security

I upgraded this asa to code 8.0(3) and I have been seeing this error. NO translation group for icmp src outside:publicIP dst:NOC:insideIP (type3 code4)to me it looks as if the outside interface is trying to ping a box on the noc network. Why would it...

Hi AllPlease help me out with this .I am getting attached IDS Event viewer error while trying to install it .Please let me know the probable causes and how to rectify the same RegardsAnkur

I am setting up my dmz area on my new 5520 and have the outside to dmz nat for a webserver working properly. However Im having trouble understanding what needs to be done for reaching that webserver on the inside. Reading of inside to dmz nat, identi...

So when you use the "filter url exception" command, does the firewall still inform the Websense server of the URL and just allows it out. Or does the firewall totally not report on URLs from those addresses to Websense?

Could anyone advice, if I have database servers subnetwork behind an ASA5520 box, (application servers do not behind the ASA5520), what rules I need add in, basically?what if the servers are unix server and what if the servers are window server?Any c...

How i can setup VPN banner on PIX 6.3(5).

Hi all. We initiate an outbound FTP session with a bank. We receive an error :The remote host actively refused the attempt to connect to it". The bank stated that we need to open port 6100-6199 in order for this to work. This sounds very excessive to...

Hi,I have configured webvpn as well and ipsec client vpn on asa 5510 7.2(3). I want webvpn to be enabled only for selected ids, at present all ipsec client vpn users are also able to login to web vpn.Gaurang.

My question is, if it is possible to establish a VPN having of the side of the client a Cisco VPN Client and of the side of the Server a Checkpoint VPN Server, these are compatible?

What is the latest PDM that can be used to fix this known issue? I'm currently running:Cisco PIX Firewall Version 6.3(5)Cisco PIX Device Manager Version 3.0(4)

We are setting up an ASA5505 with security plus licensing to provide trunking to a catalyst 2950-12 switch. We got the trunking up and working, which passes two vlans, but we cannot get routing to work between the vlans. We have enabled same-security...

Hello,My questions:Can I add a static NAT translation for a nonconnected network? So following interfaces are on ASA:Outside: 10.10.10.0/24DMZ: 10.10.20.0/24Inside: 10.10.30.0/24 also behind the inside interface there is 10.10.40.0/24 (no interface o...

Hello, we are considering an FWSM but aren't sure how it will integrate into our network... Our core consists of a 6500 divided into approx 6 vlans... 1 Vlan for a residential network, (Further subnetted at the access layer) 4 vlans for an administra...

I am having a problem with IPSec tunnel between sites A and B. Site A has PIX with 8.x code and SITE B has an ASA with 7.2(3) code. The Crypto access-lists are as under :SITE A has :access-list 119 extended permit ip object-group Support_DMZ object-g...