Network Security

I have a subnet 172.28.85.x on my pix dmz interface. below mention subnets are on my inside interface.172.28.64.x172.28.78.x172.28.32.x172.28.92.xI want my Inside to access the dmz and dmz to inside at the same time.High to low and low to high any si...

Hi, I have ordered 2 identical Cisco ASA 5520's firewalls. I will want to get these to work in active/standby (stateful) mode, but I was just wondering how would they connect to each other? Do I use one of the GB ports or the serial?Thanks

Hi,Looking to impliment VLANS as per diagram.ISP->Router-->ASA5510--->Switch(L2 2960).Want to create some 25 VLANs and don't want to allow communication among VLANs.Just want to allow internet access to all of the VLANS.How should I meet this??Reg,Su...

Hi Guys,I am seeing a very high packet drops on the ASA interface. I have verified that duplex settings are fine and there are no errors on the interface. Any idea why these drops are comingfw01# sh interface serverInterface Ethernet0/1.2 "server_vla...

We have a joint venture with a company who has started to take IT into their own hands. Unfortunately they still need access to many of our systems. They recently installed an ASA 5505 with their own internet connection. They are also connected to...

Hello Experts,Does multiple static route to same destination with a different metric on a PIX 515E works same way as the floating static route on a router ?For Example(Can u use follwoing static route and obtain same results as the floating static ro...

I am running RME version 4.05 and am trying to test pushing IOS images on a 3560 48port PS switch running 128mb ram and 16mb flash. When I run an analysis on Cisco works it states I only have 127mb of ram and 15 mb of flash. Is this a known bug in ...

I am using an ASA-5540 strickly for IPsec VPN lan-2-lan tunnels and will never be NATing outbound as we have a public Class-B address space.Since I'm never going to be NATing, can I disable the nat 0 and no-nat funcationality completely so that the A...

I am running a PIX 515 with IOS 7.1.2Right now we use the group-authentication to authenticate remote cisco clients when VPNing into our PIX but have no control when a user leaves the company to deny him VPNing in unless we change the group password ...

HiWhe have a ASA with three interfaces:One outside with adresses 193.55.96.XOne DMZ with addresses 192.168.59.XOne inside with addresses 172.36.253.XOur nat translation are :on DMZ interfacestatic 192.168.59.XX any outside 193.55.96.XX....on inside i...

I have a ASA '1' connected to an external subnet 'B' - this ASA is the default gateway for this subnet 'B'. I also have a second ASA '2' (inside on subnet 'B', outside on subnet 'C') connected to this subnet with a connection to subnet 'C'.All device...

hello dears and merry christmas to u all, i performed the required configurations of cisco pix 506 and tested the internet connections and found no problems at all for the internet browsing or downloading, but when i leave this pix working for some d...