Network Security

Hi all,I have a setup with 2 ISP's, and a crypto map applied to the interface of each ISP. The default route points out ISP1. I would like to connect a client VPN to the non-default routed interface. My question is how does the router know which i...

I have a pair of cisco PIX 525 with Pix version 6.3 (4), I am trying to configure the web server access from one dmz interface to other. I tried couple of scenario but could not workout.The configuration I did is as follow1. Create the static nat sta...

I am having trouble finding a way to give different users access to different parts of my network. It looks like I can only limit access to everyone. Any help would be great.

Hi,I have some questions regarding the ids module. A router is connected to the internet and is using the software firewall. There is also a NM-CIDS in the router.1) What is the sequence when a packet arrives from the internet?Is it internet -> firew...

Hi All,I am new to the ASA and trying to set up NAT to allow a web server to access port 1433 on an inside sql server. I have been able to successfully use the static nat command to open port 80 and 443 from the outside interface to the dmz but can'...

Simple one here: I have a new ASA running version 8 and need to know how to change the default telnet password from cisco to something else. Thanks.

It was suggested to me that the ASA (5510 v.7.2(2)) was capable of offloading SSL encryption (like a proxy might do).The intention is to take port 443 SSL traffic and decrypt using a certificate on the ASA then pass the unencrypted port 80 traffic ba...

Our central office has a VPN 3005 and a PIX 515. The VPN 3005 is the hub for 7 branch offices/spokes - each of which has a PIX 506e. The PIX 515 serves as the firewall for the cental office.From what I can tell, the ASA devices don't suffer the sam...

I am involved with a re-ip addressing project in which I need to change the IP address of numerous host objects that are members of Network Object Groups. I have an ASA 5520 running version 7.2(2) and utilizing ASDM ver 5.2 When I change the ip add...

I'm having a little trouble figuring this one out. I have a client that is connecting to mindspring and earthlink mail servers using port 587. The IP's are being NAT'd and there are two lists involved. The users cannot send or recieve email and are g...

we have a pix 515e with pix version 7.22and I want to store this binary file on a tftp server, but when I use the copy command 'copy flash tftp' I get an error message like 'Inappropriate file type or format'

Hi All, Please help me to stop this application."It is the flagship software product from UltraReach Internet Corp. for Internet anti-censorship. It enables users inside countries with heavy Internet censorship to visit any public web sites in the wo...

does anyone have links on configuring ip sec lan to lan ipsec tunnels

Hi, i have several site to site VPNs on my ASA so i am obliged to do : "no sysopt connection permit-vpn" in order to deny access to people from other sites to access my network, but as i do so i cannot access the ASA with remote vpn, i can still acce...