Network Security

From a host in our inside subnet, using active FTP we can connect to an FTP server out in the Internet but cannot get a list of files. Passive FTP works fine.I do have "fixup protocol ftp 21" which I thought is supposed to fix this very issue but I c...

Hi, with CSM Version 3.1.1 when i startDiscover VPN policies :Topology : Hub and spokeIPsec technology : regular VPN IPsecDiscover from NetworkWhen the system discover my hub ASA5520, i have this message " Device provisioning failed nullPlease contac...

I have a 515 running ASA 7.2 software which is configured as a remote access vpn, site to site tunnel, and is a firewall between hosts on the inside and the Internet. VPN was working fine until I placed an ACL on the inside interface. I was always un...

I am getting the following when trying to boot a new 4240:Mounting proc filesystem: [ OK ]Configuring kernel parameters: [ OK ]Setting clock (localtime): Mon Jan 28 04:19:37 UTC 2008 [ OK ]Activating swap partitions: [ OK ]Setting hostname sensor: [ ...

We had tested so far Scrutinizer, Netflow Analyzer 6 and Orion with Netflow module from Solarwinds.We like Netflow Analyzer but is a bit expensive. Scrutinizer does a great job too.Just wondering what your thoughts are for these products or if there ...

Dear sir,iam having cisco 1841 router and through that iam getting internet now i took pix 506e firewall now iwant to nat in that firewall and through vpn client software i want access outside world.plz help me in this how can i do this.Regardssrini

My IDS (version 4.1(5)) is running SSH at version 1.5. Does anybody know whether new IPS support SSH version 2? If it does, which version?Thank you.

Hi I face the problem when i boot up the PIX 515e firewall, belows are the message which appear at my console hyperterminal. Watchdog timeout failure! Please contact customer support. PC SP STATE Runtime SBASE Stack Process Hrd 001ecf11 00950334 0056...

We have a client that is currently using PIX 506E at the Main office and at several sites doing site-to-site VPN. All of the users at the Remote sites access the Internet through the Main site, this is currently being handled by a Linux firewall. The...

I can ping by IP address but not by name. I also cannot surf the web since name resolution does not work. My client's default gateway and DNS setting points to 10.1.1.1, which is the inside interface of the ASA. My Config here >ASA Version 8.0(3) !ho...

Hi ,can i classify my packet during encryption on my VPN router and shape or police classified Encrypted packet on other router like inter net router ? Thanks in advance,

i would like to telnet to my pix from any OUTSIDE IP address. I have a verizon wireless card and every time i connect to the INTERNET my ip address is different! any ideas?

Hi all,After upgrade my PIX OS from 6.3.4 to 8.0.2 my telnet sessions from the central site to remote site (remote was updated) does not work (I'm tring to telnet inside interface from remote site). no config was changed. I searched release notes but...

Hi There,I have a syslog server which is listening on non-standard syslog UDP 514 port. I need to configure my ASA to send to a different port #. I recall in version 6.3, the fixup command was used to change non-standard ports. I wonder how can this ...