Network Security

Hello, I am trying to configure my ASA5505 to correctly bypass the stateful inspection for UDP port 15044. Currently none of the default-inspect polices do not have this port listed. How do I add it and correctly get the VOIP traffic to not be inspec...

I have a PIX 515E w/ 7.0. We have a Wireless network that is associated with its own interface. We have 3 interfaces: INET, LAN and WIRELESS. There are no DNS servers on this network and clients perform DNS lookups to the Internet provider's servers....

Hi, we have a ASA5540 configured with up to 25 VLANs. Now we want to limit 10 VLANs with 100 MBit/s for each VLAN. These VLANs are on the same physical link.How can this be configured? Have anyone doing this before, or have you any documentation with...

I Have a PIX 515 6.3(5). I need to allow outside web access to a host from the outside; opening ports 9000-9005. Here is an example of the code, that I have come up with. Is there a better way to write this (e.g. One statement with a range of ports v...

How can I migrate from a pix firewall to a ASA firewall using the same DMZ. doing this so there will be no changes to the ip's in the DMZ. I have tried to NAT the inbound DMZ of the ASA which gives the ASA's IP addres to internal DMZ servers. Works a...

Hello,From which PIX OS version is it possible to assign a /31 address mask to an interface? In version 6.3(4) if I try to assign an IP with subnet mask 255.255.255.254 I get the error:"Warning : IP and subnetmask form invalid pair indicating broadca...

The boot sequence stop at this point:CISCO SYSTEMS PIX FIREWALL Embedded BIOS Version 4.3.207 01/02/02 16:12:22.73 Compiled by morlee 128 MB RAM PCI Device Table. Bus Dev Func VendID DevID Class Irq 00 00 00 8086 7192 Host Bridge 00 07 00 8086 7110 I...

Dear all,I have Pix 520(6.3(3)) and i'd like to replace it with another one PIX525 (7.0 or 7.2(2)) But the problem is in the old config ( Conduit ,Fixup,interfaces , VPN and...)how can i convert (move) the old config (6.3(3)) to the new one (7.2(2) o...

Hi all, I manage pair of 515E (both 128MB) in failover mode. Few day ago I occured some akward situation: in 2-3 hours memory usage rise form standard 63MB to 112MB (w/o traffic rise) and than PIX no1 refuse all outside connection (all inside network...

Hi all,I tried to find out Failover/High available solutions for IPS 4200 series,I didn't saw failover solutions in IPS guide document. Anybody can be help me!

When configuring the cepsetup.exe on my stand-alone CA, what specifically do I have to put into the Name: Email: Company: (etc) fields? The hostname of my ASA? The FQDN of my ASA? Thanks!

I want to put my FWSM in transparent mode. I have created the configuration on my 6500:firewall multiple-vlan-interfacesfirewall module 6 vlan-group 1firewall vlan-group 1 100,101!interface vlan 100ip address 192.168.100.1 255.255.255.0!Config in my ...

Hi,Is there a way to fully automate signature updates? By that I mean something that automatically downloads updates from Cisco and then automatically pushes them to IPS.Thanks,Tanya

I was reviewing the configuration a new ASA5505 running 8.0 and I saw the following statement in the configuaration: dynamic-access-policy-record DfltAccessPolicyNot knowing what the command does, I tried to remove it but an error stating I am not pe...