Network Security

Hi I have two pix 502 firewalls with an IPSEC L2L tunnel between them. The L2L tunnel establishes and is working fine. I added the dynamic VPN for road warriors to connect in but I get the following errorIPSEC(validate_transform_proposal): invalid lo...

Howdy, I apologize for my ignorance but I've currently got one Pix 515 w/ failover enabled and access to another w/ failover active/active. What's the difference and can I use one of them or both in a dual ISP configuration? I'd like for my home serv...

Hello, I'm setting up an ASA 5505 in transparent mode. I can ping the ASA device on the network but I cannot connect via ASDM software. When I revert back to routed mode, no problems using ASDM. I'm connecting via enet cable from laptop to Ethernet 0...

Need advice on setting up two things on an ASA-5510.1) Setting up QoS on a VPN connection. When I enable QoS on a VPN it breaks all other VPNs I have configured.2) Setting up a VPN with an iPhone VPN Client. Cisco's Docs are pretty straight forward ...

Is there any functional difference between:global (outside) 1 interfaceandglobal (outside) 1 24.23.22.1 netmask /29assuming by global block is 24.23.22.0 /29 and the outside interface is 24.23.22.1 /29?

Is it possible to disable the automatic command replication in a failover ASA configuration?

Hi people,Can I manage two Internet providers and implement load balancing in a ASA 5505?Thanks for your help.Martin

Is it possible (with pix 6.3) to change the rule base line number ordering from incremental integers to base 10 line numbering ? I mean that right now the rulebase lines are line 1, line 2 line 3 etc. Can I change these into Line 10, 20 , 30? The pur...

Hi,I'm facing kind of weird behaviour on a Cisco PIX 515E firewall that I don't understand. I hope someone can explain this:I have a server on the inside interface of the firewall. I have set an access list on the outside interface to define rules fo...

I inhereited this mess and our ASA 5510's are in route so plan to upgrade are already in place.In the meantime I have to some syslogging. our private network is 10.1.x.x our DMZ address is 10.254.x.x I have a permit ACL for ICMP and Syslogging, howev...

Does it necessary to have icmp permit...statements on FWSM 3.2(2) ver.I tried with out having and am able to ping the interface.

My customer is planning on migrating a portion of its installed ASAs to the lates 8.0 code. Also, they are currently managing this devices with CSM 3.1.The issue here is that in the Supported Software docummentation for 3.1, the ASA version 8.0 is no...

Is there a way to add more than one IP on an interface for an ASA 5510 running V8.0(3) software?

I have a new ASA 5510 that is behind our router/firewall. I am having some problems with configuration and not sure where I am hung up. I can't ping the internal Lan, 192.168.1. addresses. I have attached my configuration.

Hello,My base design is with 3 routers. RouterA will be internet access for RouterB and RouterC. There are will be T1 between RouterA and RouterB and a T1 between RouterA and RouterC. I would like to know if I can replace RouterA with an ASA 5500 ...