Network Security

Hi All,I am planning to put up a proxy server on our internal network and would like to see if this is the best way to configure my ASA (7.2(2)):(1) Proxy located on internal network(2) All client browser will be set (Internet Explorer) to use the pr...

Hi all, what is the normal way of denying traffic to a dmz, if from the inside all is allowed, would i just create an access list on the dmz outbound ?

Hi, on my ASA I have added the following for SSH2, but what do I need to do next?ip domain name domain.comIP SSH version 2crypto key generate rsaWhen I log it says it needs a username and password. I have a level 15 username and password that I use ...

I am going to be doing a very significant number of config changes to a production Pix 525. This includes removing entire access lists, some objects, shutting down some unused interfaces, adding some new object groups, removing some access list entri...

I have a site to site connection setup between an ASA 5510 and a PIX 501. I have the ASA's inside 10.1.1.x network being able to access the PIX's 10.2.2.x network. That is working fine. However, I need to be able to access both the ASA and PIX's outs...

Does the ASA 5510 allow you to static NAT and external address to more than one internal address?For example, if host A is not available, the NAT from outside in will go to host B?

I need to install two ASAs, one with AIP-SSM module and other with CSC-SSM in the same network. Is it possible? If so how can i connet the two devices together.

Hi Folks,I'm working with a customer that has a number of ASA's running 7.2 code. They would like to try out the new 8.0 code for SSL VPN on one of the firewalls. Has the 8.0 code been stable in production environments? My gut reaction was to reco...

Hi I have a pix connected to 2 remote sites (1 & 2 vpn 3000 concentrator on both end sites) I would like to configure the PIX having a principal server (site 1)and a secondary server (site 2)in case principal tunnel fails the second become activeIf p...

I'm really hoping somebody can help us. I can post configs if it helps but our issue is this... Once a call is initiated, a tunnel is created between the two devices using EasyVPN. HOWEVER, the tunnel times out... ALL WE WISH TO DO IS TO MAKE SURE ...

Hi allI have 3 servers in my dmz,I have to add two more Servers in my DMZ with new Public IP addrss which is different from other server's ip.Please advice me the solutionThanks

Hi, I'm running into a bizzare issue that i cannot pin down.If i try to access www.nmh.org from outside of my PIX, it works fine. If I try from inside the PIX, reliability is about 5% that the page will ever show up. The website is pingable from...