Network Security

can a pix failover to an asa or vice versa or do they have to be the same device.

I need to punch a whole through this ASA to get port 25 and 443 traffic through can someone give me the command to do that? Currently it's a mail server on the other side of an ASA. I have the following Static on the ASA.static (inside,outside) tcp 2...

Hello, I'm having serious issues getting a PIX 515E seen on the network to perform a password recovery. I set the address, gateway, and server address. Setup the tftp server, but iI cannot ping the device. Any sugestions?

Hi Gurus et al.I've inherited a large group of routers and I'm working to modify the enable secret them. These are all cisco 831 routers running 12.3(8)YA1 using EzVPN to connect to our WAN. The startup-config is generic in nature and is used in conn...

I would like to ask my fellow security geeks out there to assist me in determining the types and amount of non-vpn traffic going from inside to to the internet. I don't have Net Flow, and I don't have time to put a sniffer on. Is there some type so c...

Hi,I have a camera system in the internal network and don't want to allow direct access to that system from the internet. Has anyone tried to proxy such traffic through a DMZ connected host ?regardsChristoph

Using "US-CERT Critical Infrastructure Information Notice CIIN-08-005-01 January 05, 2008" as the reference. I'd like to create a custom signature that looks for the string "0.js"The effort is to determine if my webservers have been or will be impact...

I have an ASA firewall and I want to block the users to transfer files in the MSN instant messenger. I know there is a feature in Application Policy that should take care of it but it's not workint, I've set the IM inspection and set the File-transfe...

Does the Regex engine used by the IPS support lookahead syntax? I'm working on creating a custom signature using the TCP String engine that I want to fire if it both finds a given string, and does not find a second string. A negative lookahead seemed...

I am currently logging into the Pix 8.0(2) usingssh version 2. This is my test box:aaa authentication ssh console ABC LOCALaaa accounting ssh console ABCssh 0.0.0.0 0.0.0.0 outsidessh 0.0.0.0 0.0.0.0 insidessh timeout 60ssh version 2I want to only al...

Hi All,We are facing a peculiar issue with ASA. we have internet connectivity in the following combination. Internet router --> ASA firewall --> local LANWhen ever users are downloading huge file from internet, sitting behind ASA the download is not ...

I want users on the inside 192.168.1.0 to access any resource on the outside 10.15.0.0 and then allow selective users on 10.15.0.0 to access resources on 192.168.1.0. Is it possible to do it? Running config is as follows: ASA Version 7.2(3) !hostname...

Hi,I want to NAT an inside local subnet (172.1.0.0) to inside global (172.2.0.0) when going to 10.1.0.0 but I need the hosts to keep the same address after translation...how would I accomplish this?global (inside) 8 172.2.0.0-172.2.255.255 netmask 25...

Guys,Hope you can help. I am getting this errorJan 10 17:45:33 [IKEv1]: Group = 213.XXX.XXX.XXX, IP = 213.XXX.XXX.XXX, QM FSM error (P2 struct &0xd5c50928, mess id 0xc9d79d4e)!Jan 10 17:45:33 [IKEv1]: Group = 213.XXX.XXX.XXX, IP = 213.XXX.XXX.XXX, Re...

Hi ,I am runnnig 7.07 in pix 525 with the following problems :1.Cpu utilzation is extermely high. (52%)If I analyse the cpu profile will that incerase the utlization further?2.My pixes have failed and crash thread is fover_serial_rx and it is showing...