Network Security

I just purchased 2 ASA 5505. The hub site has a static IP and the spoke has a dynamic IP. I am trying to create a site to site VPN tunnel using the wizard. However on the static based ASA it is asking for the dynamics IP. Since I do not know it curre...

My firewall A will be connecte with Router A and use the OSPF.Only firwall interface that is connected with router will use the OSPF and interface that is connected with switch will have the static routes. I will redistrubte the static rotues into th...

Hi there. I have a failover pair of PIX 535's and when I execute the 'write mem' command it takes approx 45 seconds to complete, and the CPU spikes to 50%. Any idea's on what could be happening? I'm running PIX 7.2(2) and ASDM 5.2(2).Thanks for the h...

Has anyone experienced issues with windows 2000 workstation, and RPC access at boot-time. When booting a machine with csa i get events in windows saying that the RPC server is not available, putting the csa in testmode removes this problem. The probl...

Greetings,Am running a Cisco PIX 525 with OS v7.2. I am trying to enable traceroute through PIX. I already have the below config on my firewall for allowing ICMP replies from untrusted i/f.access-list xxxx extended permit icmp any any echo-replyacces...

Hi all,anyone knows the size of the nvram on an asa5510?In other words, how big can it be a configuration file on the asa's?Tnx, Max.

Hello,I am using a fwsm with 3.2.5 Release and i found some strange static-nat behavior.My nat configuration looks like this:static (inside,outside) 172.23.253.6 172.23.0.100 netmask 255.255.255.255route inside 172.23.0.0 255.255.0.0 x.y.z.vEverythin...

folksi have an internet facing 2600 router in front of a 515 pix clusterthe 2600 nats incoming traffic from ANY host to an internet routable address (destination port 25) and routes it to an internal mail serveri can see the translation table and the...

I have a strange problem when using the VPN Client over a WLAN. A customer runs a public WLAN and allows its users to establish connections with the VPN Client to a 3000 series concentrator. The customer is a university and has a lot of mobile device...

I have configured FWSM as inter chassis Active Active failover. The failover works just fine only for 10 mins before both context on both units shows active and peer context as failed.I am not sure what the issue is. The failover and Stateful Vlan ar...

Is it possible to use more than one hub with a DMVPN WAN design for the purposes of resilience? Failing that, can two IP addresses for the hub be specified on each spoke?This is only a small network comprised of about 10 spokes with ADSL and a hub wi...

Hi,We've recently migrated on to an ASA 5520 from a Nokia Checkpoint. On the checkpoint when you were watching traffic on the GUI, it had the ability to do lookups on the outside IP address and display the host names in the log. For instance, you cou...

Hey alltwo pix 525s. One on each side of a t1. Set up looks like this:Pix---Router---T1---Router---PixOne of the routers is set up with a private address on the inside (which then connects to a pix on a private address). How do I get that pix to set ...

I have been trying to get RPC over HTTPS working through the ASA 5510 by NATing port 80 and 443 to the internal Exchange 2003 server. I am able to connect to the server via Outlook 2003 when it is outside the firewall but not when it is behind the fi...

I'm looking to deploy an ASA-5510 as our internet firewall. We'll be using a DS3 coming into a Cisco 3845 router and we want to service 4 different, NATed networks. My question is, can the ASA-5510 with a Base license service the needs of all three n...