Network Security

We are setting up an ASA5505 with security plus licensing to provide trunking to a catalyst 2950-12 switch. We got the trunking up and working, which passes two vlans, but we cannot get routing to work between the vlans. We have enabled same-security...

Hello,My questions:Can I add a static NAT translation for a nonconnected network? So following interfaces are on ASA:Outside: 10.10.10.0/24DMZ: 10.10.20.0/24Inside: 10.10.30.0/24 also behind the inside interface there is 10.10.40.0/24 (no interface o...

Hello, we are considering an FWSM but aren't sure how it will integrate into our network... Our core consists of a 6500 divided into approx 6 vlans... 1 Vlan for a residential network, (Further subnetted at the access layer) 4 vlans for an administra...

I am having a problem with IPSec tunnel between sites A and B. Site A has PIX with 8.x code and SITE B has an ASA with 7.2(3) code. The Crypto access-lists are as under :SITE A has :access-list 119 extended permit ip object-group Support_DMZ object-g...

In a NAC OOB environment, using Catalyst 3750s (IOS 12.2.25) with MAC notification, an end user can attach a switch or hub to their Cisco IP phone, be authenticated by NAC and then additional PCs can attach to the hub and gain access to the network. ...

I am running FWSM Firewall Version 3.2(3). I am trying to copy the contents of my capture buffer so that I can look at it with Wireshark. The documentation states that you can use the pcap keyword for this. I cannot get the firewall to recognize said...

Hi,We are trying to build a security zone with 4 firewalls and a physical dmz.fw 1 and fw 2 are on the left side, then a 2 switches and 2 microsoft firewalls on the right side. All are supposed to connected redundant to each other. fw 1 and fw2 are a...

Hi all,One of the Customer is planning to buy ASA 5510.He has a central site with Internt leased line with static IPs.There are multiple branches with Internet Broadband connectivity.For IPSec-RA (Remote access IPSec), do remote site PCs need to have...

pix 515 os 6.1 32m ramCan I and should i go to 6.3Also can i jump right to 6.3 from 6.1Thanks againBill

I have a ASA 5510 configured with vpn capability. Somehow the vpn client will keep broadcasting the traffic via UDP port 137. Why is this so?Thanks

Hi,Not sure how I can do this, but I have a windows server on a VLAN (DMZ). I have a Cisco ASA and off the ASA a Cisco 3750 which I have all my VLAN's for my DMZ's. I have been asked to monitor if a port on a server gets triggered, is this possible?B...

Hi, In Data center FWSM, static nat done on Data base server for Branch users. Can branch users access Data base server with original ip( Data base server)?

I have 10 servers behind pix running multiple applications and clients are connected to them only when i allow there IP . But i want to manage a log file so every 1 passing PIX will be logged is there any way to do this. Is it possible using SYSLog

Hello we just receive 4 5540 ASA and they are running 5.1(6)E1 on the IPS and I want to update it to 6.0(4)E1. I tried using the ASDM to no avail this is new to me need to implement this tomorrow don't want to put in network until IPS is upgraded. Pl...