Network Security

Hi,I have a PIX 515 with two interfaces, inside (10.0.0.1) and outside (200.200.201.2).The web server ip is 10.0.0.237. I have a static translation to 200.200.201.237.My access list is wide open...permit tcp any anypermit udp any anypermit icmp any ...

Hi, has anyone ever configured a pix to site between a local LAN switch and an internet broadband router to basically block all trafic except for outgoing vpn connections using cisco vpn client to a cisco vpn concentrator from pc's located on the loc...

Is it possible to pass vlan tags through either a PIX 535 or a CISCO 6503?Scenario:I have several switches in line with each other, all layer 2, connected to one router. Router ----> Switch ----> SwitchI'm running a handful of different vlans from th...

Okay so I've looked over the config many times and I can't figure out what the problem is. I have 2 servers running behind the PIX (s1 - out 78.xxx.xxx.15 in 10.xxx.xxx.83 s2 - out 78.xxx.xxx.14 in 10.xxx.xxx.85). From server 1 I can VPN/RDP in, b...

I have situation in which i need use port range with Static.is it possible???

Hi, I have a big network comprising of 10.0.0.0 my inside interface ip is 10.100.1.1 /24 my management interface ip is 10.150.1.1 /24 The default inside route in my ASA is route INSIDE 10.0.0.0 255.0.0.0 10.100.1.1 From my user network - 10.200.1.X, ...

Good day. It is necessary to make translation of the address between 2 interfaces: dmz2 security-level 10 dmz1 security-level 40 In dmz2 62.33.x.77 address It is necessary that in a network dmz1 it was accessible to the address of 62.165.y.77 the Com...

HiWe have set up an IPsec site to site VPN tunnel with ASA5510 and Checkpoint on the remote side. ASA5510 is running version 7.2.1. The VPN tunnel comes up but when users use windows Remote desktop to access the remote servers the user sessions get d...

We have deployed CSS-SCA Secure Content Accelerator to terminate the SSL connectiion from the clients and the traffic between CSS-SCA and servers is HTTP on port/80. Our IPS sensors (deployed in detection mode) see this HTTP traffic and triggers ala...

hi,inside have a AD Server.dmz have a exchange mail Server.problem:1.exchange service not start.2.asa access-list allow all ip.access-list temp permit ip any anyaccess-group temp in interface dmzaccess-group temp in interface insideaccess-group temp ...

I'm just trying to allow pptp (1723) from an outside network to access the servers behind the pix that I have installed. I know it is a simple access-list... any help?Thanks!

I know the new AnyConnect VPN client allows you to establish SSL VPN sessions to ASA 8 without opening a browserCan I get such functionality with ASA 7? I downloaded the SSL VPN client from software center (sslclient-win-1.1.3.173.zip) but this only ...

We have a PIX 515E that controls our VPN access.I have been requested to allow internet access for those who connect to the VPN.This can be done with split tunneling. My question is:We have two inside interfaces. One is no problem if they split tun...