Network Security

Every few months PIX stops passing outside traffic for HTTPS (443) port for Exchange server OWA ( internally it works just fine). When I look at xlate it shows 0 bytes and flags aB. I change rule to port 4343 and it works. After a few weeks I change ...

Hi I am abouto to establish a l2l tunnel with remote site. But they say that my local network 10.10.10.0/24 is already in use at their site, so they want me to NAT my local network and go through the tunnel. I have ASA 5540. I have just 3 hosts in h...

Hello,I've got 2 ASA 5520 on my network.The first ASA (Firewall 1) realize site to site VPN between Datacenter et remote office, and the second ASA (firewall 2)do exactly the same thing, for other remote office.As you can see on attachments, "Firewal...

Hi all,Is there a clever way to log e.g. enrollment requests coming in on an IOS ca server?What I'm trying to do is to get the embedded event manager to email a notification to the admin staff, when an enrollment request arrives at the ios ca server....

Has anyone seen this on 5.2?: I have a service restart rule that is only to be applied when the rule module it's associated with is in a system state of medium. However, when I set security to high, and then stop the service, the service restart rule...

Is the ASA pre-hardened? Any info about hardening this ASA?

We just started configuring ASAs for VPN access after years of using the PIX. One of the biggest changes that I have noticed for the Remote Client Access is the use of a pre-shared key. Is there a way to disable the pre-shared-key attribute under th...

IBM RSA's (Remote Supervisor Adapter) located in my DMZ successfully load up the front end page but perform poorly.The management pages load up but there is a significant time interval between clicking a link on the page and the RSA returning a resp...

One of my customers is experiencing a problem with voice calls being established through their Cisco ASA 5510 (ver 8.0.3)I haven't been able to get exact details of the phones they are using but I believe the gateway server is running SWYX. It appear...

Hello,I have setup a Win2003 Server where I install a CA/RA server for SCEP enrollment of my ASA5510. I entered the following config on the ASA:domain-name mydomain.comcrypto key generate rsacrypto ca trustpoint MYTRUSTPOINT crl optional enrollme...

I'm troubleshooting a site-to-site VPN tunnel between our Cat 6506 w/ VPN module to peer's PIX-515. The peer's crypto config appears to be incorrect and has two tunnels built between it and our VPN module.Example:!crypto map mymap 1 match address ac...

I have two locations, each with failover ASA's 5500's connected together with l2l vpn. I am running IPS mods in each ASA and using CSM to manage policies. Question: can I create 1 "global" policy for all 4 ASA's and two "local" policies to control bo...

I can change all the password of my users in the pix and aditionally the password enable?Thanks

Hi, I want to ask to more experimented network admisnitrators about a problem that I am experimenting and I don't know how to solve:I have a PIX 515E running 6.3(4) IOS and there are 2 networks configured on it:Outside 192.168.0.0 /24 (security level...