Network Security

Hi all, Lets look my configuration:static(inside,outside) tcp 23.56.67.78 www 192.168.1.2 www netmask 255.255.255.255static (inside,outside) tcp 23.56.67.78 smtp 192.168.1.3 smtp netmask 255.255.255.255access-list out_in permit tcp any host 23.56.67....

HelloWe have a ASA 5540 + IPS installed here. Unfortunately the guy that installed left without leaving any documentation so I'm a bit lost with this.We have a 100Mbps FD link to the Internet. The inbound traffic (from the Internet) shows no limit (I...

Hello all,Cisco Newbie here. We have just put a gateway between our PIX 515e and our email server. This gateway needs port 4 open to receive its updates from the manufacturer.Could someone please advise the securist way to do this?Thanks in advanceSt...

I have a pix 506E and I get ~ 20 /sec of the these messages. The message is Deny tcp src outside:xxx.xxx.xxx.xxx/29977 dst inside:yyy.yyy.yyy.yyy/25 by access-group "OUTSIDE_ACCESS_IN" Where yyy.yyy.yyy.yyy is my webserver. I realize that this means...

I am trying to bring up a tunnel between my older 2811 and my new ISR 2811. The tunnel shows QM_IDLE with a sho cry isa sa on both devices but I can't ping across the /30 that I assigned to the tunnel interface and sho ip eigrp neigh doesn't show th...

I have two PIX firewalls configured with two OSPF processes.The edge router is connected to the PIX outside interfaces in one process.I want to make sure the edge router will alwas prefer one PIX over the other, but the one I want preferred has a low...

Hy.I had an problem yesterday when i try to upgrade my fwsm from version 2.3 to 3.2.In version 2.3 i was able to connect to an dmz address directly and to it's inside nat address.But after the upgrade it was not possible anymore to connect to the dmz...

Wanted some opinions3|Jan 12 2008 07:48:14|313001: Denied ICMP type=3, code=13 from 12.126.158.81 on interface outside6|Jan 12 2008 07:48:19|113015: AAA user authentication Rejected : reason = Invalid password : local database : user = root6|Jan 12 2...

I would like to know if if is possible to set up static translations to NAT both the SRC and DST addresses of a packet. I would be using an ASA

Is it possible to enable communication between 2 VPN clients that are terminated on the same ASA firewall? They both get allocated an IP address from the same IP pool.Thanks

HiWe are to plan a migration from DMVPN Phase 2 12.3(11) to a DMVPN Phase 3 architecture (about 300 spokes).Does someone have experience any issues with the following IOS version in a DMVPN Phase 3 architecture ?12.4 (11) or 12.4 (15).Thank you very ...

Hi all,Today when i saw my syslog i found a lots of strange and similar log mssg on my pix 525 (v7.29(1)) the error mssg is attached however i changed a little details in that jst for security reasons.LAND attacks seems to happen when a spoofed packe...

HiHow The IDS TCP Reset work. I get configure with the IDM but i need explanation of it. have any drawback of Reset function ??.ThanksBiplob