Network Security

Hi,I have two pix 515e firewalls running v7.2(3). They have a similar setup. On one pix outside has a small /29 ip block which routes a /25 and a /27. I've setup two static rules to allow traffic from a lower interface to higher levels. This works no...

Hi,until recently the order of access lists in our PIX config was:namesacl_outsideacl_dmzacl_insideacl nat0acl crypto mapsstatic mappingsisakmpsRecently, while editing access-list acl_inside I entered no access-list acl_inside which removed all the a...

I have two ASA devices. 5510 with IPS and 5520 with Content scanning. The 5510 sits behind the 5520. I want the 5520 to perform all firewall functions along with content scanning for spyware and viruses. The 5510 will be used purely for IPS for t...

For troubleshooting purposes and to answer numerous questions from our clients, need to know the order in which a packet is analyzed by a PIX\ASA.What are the steps involved when apacket enters a fw and leaves it.So I did some research and came up wi...

I have two PIX 515's running in failover mode that were just upgraded to ver 8.03 from v 7.11.Ever since the upgrade on Friday the PIX will work fine for about 10-15 hours. Then all of a sudden no one on my network can send mail? I have confirmed t...

Ive got some Client on the Inside Network which should connect to a Server on the Outside Network through a PIX 501. Now I want to translate the Destination Address fom the Inside to the Ouside. Anybody an idea how to do that? Thanks

I have an odd issue with with my VPN setup. I'm using a Windows 2000 server as a VPN server, it sits behind an ASA 5510. All of my users can get in fine in their normal use, generally remotely connecting over DSL. However I often get reports of fa...

I tried to setup the Cisco ASA 5505 (Version 7.1(1)) @ my own office.My overall network:DSL modem (200.0.0.169/29), which connected ASA outside VLAN2 (200.0.0.170/29) and then it connected to ASA inside VLAN1 (192.168.1.1/24) 200.0.0.169/29 is the p...

I know if MC name is changed, then the certificate has to be recreated along with other steps. How about if only the domain suffix is changed but the name stays the same? Will the agents still be okay?

Hi I Have aquestion, i am using cisco pix 515e withs cisco ios 7.0(4) with ASDM 5.0. I am configuring VPN access to my corporate network and I have the vpn working fine. But there is one thing, i only can connect with the vpn if I use an ipaddress p...

Hi,I want to know how to find the thrughput of the inside inside interface and outside interface of the PIX-515EPlease help me.Thanks and Regards,S.Venkataraman.

I recently acquired a Cisco IDS 4210 through ebay and the unit was already configured with 512MB and IPS 5.1 code (byt the seller). Nonetheless given the unit only has 2 NIC (one for sensing and one for managment access)I can't configure inline mode ...

Anybody know where I can find a summary list of protocols you can specify using the "eq" command at the end of an acl?

Does anyone know of a bug that would cause or know why 2 Fw modules keep rebooting or failing over to each other. They are housed in 2 different 6500 switches.