Network Security

Have dual identical 5520s to provide active/failover for lab environment. To secure environment behind firewalls, I've read that I will need to do L3 routing on ASA and remove L3 vlan routing from dual redundant C6509s.If i'm doing failover / redund...

Hi everyone;Some how I lost my rsa keys, not sure how but when I do a sh ca mypublic rsa nothing shows. Question is how do I regenerate the keys so that I can SSH into the router again? I thought I can do a ca generate rsa key but that doesn't work...

Dear sir, We have pix 506 e in that all users r able to browse but unable to connect ssh with name server with external dns. Regards srini

I recently upgraded a customer from a PIX 525 (running 7.0 code) to a pair of ASA 5550s in active/standby mode. The ASA runs 8.02. The customer uses a software identity service called Trusted Network Technologies 'Identity', which communicates with a...

running Pix OS 7.0x Guys what am I missing here? I have an permit ip any any from my inside to my outside interface. Yet rhapsody will not get past the DRM stage of install. I don't have any of the sites it wants to access blocked by domain or IP in ...

Hi, I have few servers in the dmz zone, all my users are in the inside zone.we have typically found that after some inaction all the connections are getting time out and we have to restart the services.On my pix 515e running 7.22, i have the followin...

I'm getting this log on my FWSM. Does anybody know why? <166>Feb 21 2008 10:55:58: %FWSM-6-110001: No route to 192.168.101.1 from 192.168.8.10I have the following config:FWSM Version 3.2(4) <context>!firewall transparenthostname ADMIN!interface Vlan1...

Pix 515eI have a VPN setup with another site. One of my servers is part of the VPN. However, now that server needs to get to another non-vpn server thru port 80. I can't figure out how to allow it. It seems like it is "locked" into this tunnel and o...

I was reading the the Online Help within the IPS 4240 Menu. I wanted to know how to configure alerts. I found a section that basically takes you to the Signature definition screen, allows one to pick a specific signature, and then set alerts based o...

Hi all. I have a cisco 1841 which i use to segregrate 2 private lans.The commands below shows one of my fast ethernet int which i place acl on. interface FastEthernet0/1 description $ETH-LAN$ ip address 192.168.4.253 255.255.255.0 ip access-group 100...

Hi;Can anyone point me in the direction of documentation about how to install additional network cards into an IPS 4215.Thanks in advance

Hi Pls help me out for CSM Policy Deployement ...1) My PIX 6.3 is having AAA Tacacs configuration , when I am using user:csm configured on ACS (Tacacs ) with SSH/Telent I am able to Login and do all editing in config.2) But when I am using same user:...

Greetings all:We are having an issue allowing traffic to pass through our PIX 515e running 7.2(2). It seems like no matter what the ACL states, the traffic is always dropped by the implicit deny. I have even gone as far to temporarily permit ALL IP...

Hi allany idea why my pix will allow me to display a capture in plain text but will not convert to pcap for download ?doing https://fwall_ip/capture/cap_name shows everything fine in a browser.Trying https://fwall_ip/capture/cap_name/pcap pops up a d...