Network Security

Hi @all,i've a l2l vpn between 2 pixes [7.2(2)]. Now i'm trying to limit the vpn traffic to telnet (biderectional). I've tried it with the acl:pix1:access-list 111 line 1 extended permit tcp host 192.168.178.11 range 1024 65535 host 10.5.1.2 eq telne...

Hi,We have pix 535, 6 interfaces, active stanby mode.In that 2 of the primary pix interfaces unable to ping from Secondary pix and vis versa.In that particular interface status are normal. Even i have checked with rebooting pix also.but i am finding ...

Hi guys,I have Cisco ASA-SSM-20 deployed INLINE.I can cut any traffic without any problems except SSHv2 over HTTP or HTTPS.Implementation ? - http://dag.wieers.com/howto/ssh-http-tunneling/Easy, you can make an HTTPS tunnel, then SSH over HTTPS and a...

What is the use of having same-security-traffic permit intra interface when the traffic between same interface hosts are allowed by default.

i create remote vpn on asa5520 to inside its work, i can use resource (server) in inside ok but i can't ping to firewall's interface inside. and when i add static nat on asa5520 when i remote vpn it's cann't work i cannot use resource(server) in insi...

Hi,Where is the best place to position a 6500 switch with FWSM module in Routed Access LAN (Layer 3 to the Access Layer).We have a layered network with Core/Distribution/Access Layers. The core consists on 2 x 6500 with FWSM+IDSM, dist consists of 2 ...

Hi, Kinldly provide me the command and step about how to take image backup from Pix v 6.3?.

Hi, all!Can anyone help me with it?I am trying to conf. so that the inside and outside client can connect to the http server in the DMZ zone I can ping from the http server to the dmz interface and back to the http server.Her is the config I have add...

Hello fellow ciscoers,My question relates to the use of the netmask command within the PIX/ASA. When used does this only translate the appropriate bits in the original ip address to the desired NAT address? For example:If configure as follows:stati...

I have a Java application over SSL that is not performing well outside of our FWSM, and in fact hanging completely in many situations. When I run the application inside the FWSM with Wireshark scanning the traffic, everything looks hunky-dory. Runn...

Hello -We have an ASA running EIGRP on the inside interface. We have a static route to the internet out the outside interface.We also have numerous VPN subnets with RRI enabled on this ASA. We want to redistribute the static RRI routers into EIGRP, b...

Running version 3.1(5) on FWSMIs there a way to allow TLS with SMTP through the firewall without disabling SMTP statefull inspection globally?

We have a vpn connection from a remote site to our main site/network. At the remote site, they get all their network drives that are on internal servers, but can not map a drive to a server in our DMZ. I've worked with Cisco tech support on this but ...