Hello,Is there any online lab on the Internet where I can try the ASA 5500? I'd like to practice to configure a site-to-site VPN scenario on the ASA 5500.Thank youjnguyen0712
Hi, my cisco pix goes out on the internet on an external IP, how can I tell it to go out on a different IP? I ave many external IP's free in my scope, would I just assign another IP on the "outside" interface?
ATT changed the IP's and now i am unable to see OWA outside of the firewall. Please let me know if there is any settings i can change in the firewall that would make OWA work.
Hi!Does anybody have experience with AD in IPS6? I tried to test it today with 3 nmap sessions each scanning 100 different IPs. I saw the Sig 13003-0 (single scanner) fired:signature: description=AD - External TCP Scanner id=13003 version=S262 alertD...
I need to punch a whole through this ASA to get port 25 and 443 traffic through can someone give me the command to do that? Currently it's a mail server on the other side of an ASA. I have the following Static on the ASA.static (inside,outside) tcp 2...
Hello, I'm having serious issues getting a PIX 515E seen on the network to perform a password recovery. I set the address, gateway, and server address. Setup the tftp server, but iI cannot ping the device. Any sugestions?
Hi Gurus et al.I've inherited a large group of routers and I'm working to modify the enable secret them. These are all cisco 831 routers running 12.3(8)YA1 using EzVPN to connect to our WAN. The startup-config is generic in nature and is used in co...
I would like to ask my fellow security geeks out there to assist me in determining the types and amount of non-vpn traffic going from inside to to the internet. I don't have Net Flow, and I don't have time to put a sniffer on. Is there some type so ...
Hi,I have a camera system in the internal network and don't want to allow direct access to that system from the internet. Has anyone tried to proxy such traffic through a DMZ connected host ?regardsChristoph
Using "US-CERT Critical Infrastructure Information Notice CIIN-08-005-01 January 05, 2008" as the reference. I'd like to create a custom signature that looks for the string "0.js"The effort is to determine if my webservers have been or will be impact...
I have an ASA firewall and I want to block the users to transfer files in the MSN instant messenger. I know there is a feature in Application Policy that should take care of it but it's not workint, I've set the IM inspection and set the File-transfe...
Does the Regex engine used by the IPS support lookahead syntax? I'm working on creating a custom signature using the TCP String engine that I want to fire if it both finds a given string, and does not find a second string. A negative lookahead seemed...
I am currently logging into the Pix 8.0(2) usingssh version 2. This is my test box:aaa authentication ssh console ABC LOCALaaa accounting ssh console ABCssh 0.0.0.0 0.0.0.0 outsidessh 0.0.0.0 0.0.0.0 insidessh timeout 60ssh version 2I want to only a...
