Network Security

I get the same results pinging in eiter direction through the VPN tunnel (tunnel is working fine) below is a trace and included is the config.HO1ASA02# packet-trace input inside icmp 10.1.6.121 3 1 10.60.50.1 Phase: 1Type: FLOW-LOOKUPSubtype:Result: ...

Hello All,I just installed my ASA 5505 and the firewall log showed that it denied a connection from Ip address 74.9.151.50 every second. Please see the attached file. What does the log message indicate and how to stopip address 74.9.151.50 from attac...

Hi,I'm not sure if this would be more suited in the R&S forums but I figure some security people must have worked on something similar....I have an ASA sitting behind a 2800 router with 2 Internet circuits. I'm trying to NAT everthing from the ASA in...

Hi,We have this module ASA-SSM-20 installed on our ASA 5520 appliance. I am able to login in ASA device but when i am doing session 1. It is asking login : after giving username and password it is not accepting the username. This module is installed ...

Hi there, I apologize if this is a repeat. But, the network I have is situated this way: No DMZ (yet), No NAT'ng, 1 Class C subnet, class C IPs assigned to devices, ASA 5505 in transparent mode, and a Cisco VPN Concentrator 3005. (This is going to ul...

Hi all,We create new VLANs & will assign these VLANs to the Firewall Services ModuleBy using the below command:-(Config)# Firewall vlan-group firewall_group vlan_rangeMy question is there any need to restart the FWSM after adding new vlan into vlan g...

Hi!I'm abit confused and need some config helpHow would you configure your PIX/ASA to let your DMZ which has a public IP-Network access to the internet without NAT'ing it through the outside interfaceAnd without giving the DMZ access anything else (l...

In a heterogeneous, non-Cisco environment (e.g. Dell switches, Sidewinder firewall), is it possible to obtain accurate topology/visualization information? If so, how is this accomplished? Any other best-practices/gotchas for getting the most out of M...

Has anyone found a viable way of converting the very odd rule definitions of an ipfw on bsd to a usable format like acl's ? I am really breaking my brain with stuff like "skip" rules ? why would you wan't that and how can i convert that to a usable a...

Does the PIX 515 running v6.3(3) OS correctly support leap year (Feb 29)?

Hi,We monitor internal users http traffic using a product called Surfcontrol Web Filter - SCWF. This SCWF server sits on a VLAN (Cisco 3750) which also has the inside interface of the ASA and we mirror the traffic seen on the inside port to the SCWF ...

Good everyone, I am new to this forum and technology cisco, I have the following environment:I have an ASA 5510 7.2 (3) that has a connection to the internet through the outside, the other 3 interfaces are connected to a switch 3560g of 48 ports, is ...

Hi,I am trying the dhcprelay configuration on PIX where the scenario is..There are four logical interafaces configured on the inside interface of the PIX.Each subinterface is in different network where the DHCP server is connected to inside interface...