Network Security

Trying to get a VPN tunnel up from an ASA 5505 to a Watchguard X1000 firewall at our colo. I'm a total newb at Cisco VPN configs, so I've probably got something monkeyed up...By the debugs, it looks like Phase 1 and Phase 2 both are coming up, but th...

Hi,Because same subnet are being in use between two sites local network. we have configured NAT overlap on IPSec VPN tunnel using ASA 7.0 and its working fine.But now on site where overlap NAT has been configured, users can not access internet.if we ...

Hi,We have a FWSM module in 6513 core switch which acts as the gateway between Vlan's.We have an exhange server in one VLAN and now we face a connectivity problem to this server on port 25 from other VLAN's. The port is open and no restrictions are t...

Hello,I've a Cisco ASA5510. I need to redirect the traffic originating from some IP addresses from inside interface destination port 80 to a proxy server, located in the inside interface, port 8080.For people who works with linux/iptables, I need som...

Traffic is fron Inside to Outside. When users from Inside connect to a host on the Outside with destination IP of 10.244.87.1, the pix should translated to 10.244.86.1. The documentation said you can use static for Lower to Higher security. This ...

I am in the middle of a Checkpoint to ASA conversion and so far it's gone pretty well.My current problem though is that Checkpoint allowed for me to create an ACL that I could specify a group I created called RFC_1918_Group would not be allowed comin...

Actualy i can ping from inside to outside with ip 192.168.101.11, but can't ping from ip 192.168.101.123.I have also post the running config.Plz reply back asap.thanks

I am unable to find documents on CCO that explains error messages on ASA5520. "%ASA-2-106001: Inbound TCP connection denied from x.x.x.x/1266 to x.x.x.x/22 flags SYN on interface outside" registered on ASA5520 7.2(2)22. Does anyone know what this m...

Hi all,I have an odd problem on two PIX515 on two seperate customer sites.The customers are able to access alll web sites OK through the PIX (http and https) with the exception of the personal banking pages of HSBC and FirstDirect.Does anyone have an...

I'm seeing a lot of events in our ASA logs for 106001 relating to external source TCP (port 80) connections being denied inbound to our PAT address. The sources are all valid web sites which users are accessing. If a source inside connects to a websi...

Hi all,All is in the title !Is there a way to reset a PIX515 to default configuration FROM MONITOR MODE.Why in monitor mode ?In fact I have sent a configuration using tftp into startup and reloaded the PIX. After this, the PIX boot normally until the...

I've been trying to make this work and have had no luck. I've got a 515E running 7.0(2) and attempted to use this command to allow hosts on my 172.17.150.0/24 subnet to browse the website on 69.90.71.85 ; static (outside,inside) 69.90.71.85 172.17.15...

I have a client that sends periodic bulk mail to their members. When they do this it completely floods their DSL connection.Is there a way with an ASA5505 to do packet shaping to limit the amount of smtp traffic to no more than 50% of their upload sp...

Hi All,I have 2 pix firewalls in failover mode. All of a sudden the primary started dropping all traffic on the inside interface.when doing a sh log I was seeing litterally hundreds of Deny UDP reverse path check errors on the inside interface. the...