Is there any functional difference between:global (outside) 1 interfaceandglobal (outside) 1 24.23.22.1 netmask /29assuming by global block is 24.23.22.0 /29 and the outside interface is 24.23.22.1 /29?
Is it possible (with pix 6.3) to change the rule base line number ordering from incremental integers to base 10 line numbering ? I mean that right now the rulebase lines are line 1, line 2 line 3 etc. Can I change these into Line 10, 20 , 30? The pur...
Hi,I'm facing kind of weird behaviour on a Cisco PIX 515E firewall that I don't understand. I hope someone can explain this:I have a server on the inside interface of the firewall. I have set an access list on the outside interface to define rules fo...
I inhereited this mess and our ASA 5510's are in route so plan to upgrade are already in place.In the meantime I have to some syslogging. our private network is 10.1.x.x our DMZ address is 10.254.x.x I have a permit ACL for ICMP and Syslogging, howev...
My customer is planning on migrating a portion of its installed ASAs to the lates 8.0 code. Also, they are currently managing this devices with CSM 3.1.The issue here is that in the Supported Software docummentation for 3.1, the ASA version 8.0 is no...
I have a new ASA 5510 that is behind our router/firewall. I am having some problems with configuration and not sure where I am hung up. I can't ping the internal Lan, 192.168.1. addresses. I have attached my configuration.
Hello,My base design is with 3 routers. RouterA will be internet access for RouterB and RouterC. There are will be T1 between RouterA and RouterB and a T1 between RouterA and RouterC. I would like to know if I can replace RouterA with an ASA 5500 ...
Hi all!I have a L2L VPN tunnel configured and working in an 837 router using this config:crypto isakmp peer address 10.10.10.10 set aggressive-mode password mypassword set aggressive-mode client-endpoint fqdn 20.20.hu.uiI need to configure this tunne...
i'm now plan to purchase NACso what i need is NAC3310-250-K9only or i need NACMGR-3-K9& if i need NACMGR-3-K9 it will be installed on the same server or i'll need a server to install it
We have a pair of 5520s set as active/standby both have a AIP-SSM. Both AIP's are set to auto update the sig files so thats not an issue but what about the active detection? The primary IPS will have seen a lot of traffic that the failover IPS has no...
