Network Security

I'm sure this is standard stuff, but I cant figure it out. I want to allow MS VPN connections initiated from inside to get out a PIX 501. Any help?

On an ASA 5500 I have setup basic extended access-lists (eg access-list inside_access_out)My connections work, however I am seeing alot of Denies such as:Deny tcp src 192.168.1.1/80 to 192.168.2.1:65535 which is the reply to a connection started on t...

My ISP has given me two different ip ranges, a /30 and a /29. The /30 is to connect to them, and the /29 are all mine to use.Normally, I'd set up a router to translate between the /30 and the /29. give the router the first address, the fw the second ...

Hi,After upgrading my asa devices (2*5510) I started to getting odd messages which relate to lan-to-lan connection between these:Dec 4 03:18:15 stasa1 %ASA-3-713227: IP = A.B.C.D, Rejecting new IPSec SA negotiation for peer D.C.B.A. A negotiation was...

I have 5 (soon to be 8) PowerEdge servers that I want to firewall and have only certain ports (HTML, RDC, FTP) open. Each server has its own IP on the web. Wire comes in, goes to a 3COM switch, then to individual Linksys routers, then to the Servers....

Why does the Firewall Services Module source the mac-address of the inside interface and not the mac-address of the outside interface when passing traffic outbound out of the outside interface to the outside world?

Hi to all,I have a problem with a virtual workstation XP SP1 (VMware) with VPN connectivity: when i accessed as standalone user i don't have any problem, but when i put it into domain and login with a user domain account, the login process crash (onl...

I've received a new asa5520 with aip-ssm (ssm-20). I have upgraded the ASA image to 7.2(3) successfully. I am trying to upgrade the SSM module from 5.1(6)E1 to 6.0(3)E1. I have the following connectionsSensor IP: 10.0.0.3ASA G0/0: 10.0.0.2Gateway:...

I had the 5505 installed about a month ago and it was working great, showing events. But as of today it shows nothing. I go to the Real-Time log viewer in the ASDM, choose Informational (or any other option) and it brings up the real-time window bu...

Have an ASA running v8, trying to figure out how to block inbound Cisco VPN client traffic to the external interface and only allow 1 block of public IP's to initate the connection. I have created access lists blocking all inbound traffic on the exte...

I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what...

I have setup CSA for several users. One of the log messages we receive on many hosts is the UPNP port 1900 blocked messages. I would like to leave the rule itself alone so we can use it in other groups, so I created an exception. I set it up as a...

I am changing from VPN3000 to Cisco ASA but when i try to move the pre-shared keys for VPN-groups from Cisco VPN 3000 it contains the character ¤ which seems to be unsupported in Cisco ASA but supported in VPN3000, does anyone know? The ¤ is typed ...

In the last few weeks, we are seeing consistent high CPU on one of the IDS devices-- staying at 100% for hours. My question: what affect does this have on analysis? Will events begin to be dropped?