Network Security

I've been using CisoWorks VMS (PIX MC) to handle all my PIX devices.After I modify a certain device and attempt to generate config it now gives:Fatal Error: std Exception(class Cdi::InvalidIdException)Other devices are o.k. - I cannot realisticaly de...

Hi, Actually I have configured a pix515E with Remote Vpn with xauth means authentication using ACS server.When I connect it through VPN Client software ,it only ask for username and password, but i want that it also show or ask for a domain name. Plz...

I have PIX 515E with 2 interface, inside, outside, I have PAT from inside - outside and NAT from outside to inside.I have installed CISCO ASDM, when I am monitoring the status syslog and droped packet rates I found that, ACL drop packet rate is very ...

Does anyone know, does the ASA 5505 only allow a range of 30 addreses or can you use the whole subnet if needed?

Two firewalls, active <> active, one located in one data center at onephysical location, the other is located in another data center at anotherphysical location. This arrangement is for disaster recover purposes and tosave money (1 pair instead of 2 ...

The signature generates false positives on DNS traffic.An example is a DNS query with an Transaction ID: 0xE30FAt networks with a lot of DNS traffic the signature will produces 30+ alarms per day.

Hi, i've a soho97, i've make a access-list and a ip inspect on e1 but when i make a port-scann, i recive that i have same port open and same port close but unsecure. can i solve?attach my configuration.attend your answer.

Hi,I am trying to set up an ASA 5500 to do some routing. We have a couple of networks on the inside, and I am trying to use the router as the gateway address for one of them. It has routes to all the networks and I added the " same-security-traffic p...

We have a Cisco Pix 515e (with Quad card for 4 DMZ's), we are thinking of upgrading as the CPU can get high etc. What is a the new model to go for that does that same job but gives us more CPU and memory?

I upgraded the ips module ASA-SSM-20 on the ASA from 5.x to 6.0.3 lately. The ASA are setup as active/standby. i upgraded both modules successfully on each ASA. After the upgrade, i notice the ASA failover to the other partner about 10 times for the ...

So does a static between zones override an ACL? Or is a static also needed when creating an ACL?

Remote management via ASDM/HTTPS on the Outside interface of the ASS5505 is configured and working over the Internet and is restricted to only a few host IP addresses. Access tried from any other Internet IP address does not work. However, when runni...

Hi all,i have an issue using nat & global; i have the following config on my pix, running 6.3nat (inside) 2 access-list ftp_clientsnat (inside) 5 access-list DomainControllersnat (inside) 5 172.16.254.0 255.255.255.0access-list ftp_clients permit any...