Network Security

Need to forward a range of ports from the outside to the inside. I have statics in there and ACLs that are forwarding one port per ACL. Now I have a VOIP adapter and it wants a range of ports forwarded to it. Thanks everyone

Hello alli have sucessfully block msn and yahoo messenger with the help of modular policy frame work via im inspection i want to know that how can i block google talk mirc icq skype and some websites i dont want to use websense of other url server pl...

Hi all,I have a setup with 2 ISP's, and a crypto map applied to the interface of each ISP. The default route points out ISP1. I would like to connect a client VPN to the non-default routed interface. My question is how does the router know which inte...

I have a pair of cisco PIX 525 with Pix version 6.3 (4), I am trying to configure the web server access from one dmz interface to other. I tried couple of scenario but could not workout.The configuration I did is as follow1. Create the static nat sta...

I am having trouble finding a way to give different users access to different parts of my network. It looks like I can only limit access to everyone. Any help would be great.

Hi,I have some questions regarding the ids module. A router is connected to the internet and is using the software firewall. There is also a NM-CIDS in the router.1) What is the sequence when a packet arrives from the internet?Is it internet -> firew...

Hi All,I am new to the ASA and trying to set up NAT to allow a web server to access port 1433 on an inside sql server. I have been able to successfully use the static nat command to open port 80 and 443 from the outside interface to the dmz but can't...

Simple one here: I have a new ASA running version 8 and need to know how to change the default telnet password from cisco to something else. Thanks.

It was suggested to me that the ASA (5510 v.7.2(2)) was capable of offloading SSL encryption (like a proxy might do).The intention is to take port 443 SSL traffic and decrypt using a certificate on the ASA then pass the unencrypted port 80 traffic ba...

Our central office has a VPN 3005 and a PIX 515. The VPN 3005 is the hub for 7 branch offices/spokes - each of which has a PIX 506e. The PIX 515 serves as the firewall for the cental office.From what I can tell, the ASA devices don't suffer the same ...

I am involved with a re-ip addressing project in which I need to change the IP address of numerous host objects that are members of Network Object Groups. I have an ASA 5520 running version 7.2(2) and utilizing ASDM ver 5.2 When I change the ip addre...

I'm having a little trouble figuring this one out. I have a client that is connecting to mindspring and earthlink mail servers using port 587. The IP's are being NAT'd and there are two lists involved. The users cannot send or recieve email and are g...

we have a pix 515e with pix version 7.22and I want to store this binary file on a tftp server, but when I use the copy command 'copy flash tftp' I get an error message like 'Inappropriate file type or format'