Network Security

Hi guys,Just wonder if you can give me an idea how to sort out a situation when I have 2 subsequent subnets of /29 bits each, one of them is "in front" of PIX515 (OS ver. 7.1) and the second is "behind". For some reason when I asked ISP to just speci...

Hello,I have a ASA 5505 at remote office, and a ASA 5510 at central office.Site to Site VPN is configured on both ASA.All is working, but sometimes VPN tunnel goes down.ASA 5505 still have Internet connection, but the running configuration has change...

Hi friends,A strange VPN issue with PIX 7.0 though not critical.There is a site to site VPN tunnel between PIX and a Cisco IOS router. The tunnel should come up upon initiating traffic to a host on port 22. When we telnet on port 22 to the host defin...

I want to place a stateful inspection firewall in front of one of my servers (between it and my LAN) and also create a VPN between the firewall and another firewall on another subnet within my network. Can the 501 accomplish this? I am going to purch...

I always have problems with password recovery on a pix. I follow the instuctions below, but always get confused.http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_password_recovery09186a008009478b.shtmlI want to connect to the pix with a lapt...

I have a SSL-VPN licensed ASA and an Un-licensed one that I am trying to set as failover. How can I UN-license the primary from ssl vpn. It will not replicate the config unless I do

Is there a management suite available out there from Cisco that allows to manage VPN 3000 concentrators in large enterprise networks? We would like to do a minimum configuration of the devices via their build-in CLI oder webinterface and then import ...

Hi all,i've got strange trouble with pix 535 [6.3(5)]:preface, ACL are ok.so....from inside to DMZ i've got a log like this:%PIX-4-106023: Deny tcp src inside:10.xxx.xxx.xxx/46353 dst DMZ-fearehu:10.yyy.yyy.yyy/3389 by access-group "ACL-INSIDE" but f...

I have a PIX 515E with a privately numbered inside interface and a publicly numbered outside interface. I am doing a combination of static NAT for inbound connections for different services and PAT for outbound connections for internal hosts. The pro...

How to upgrarde to 8.0(2) after getting the image.need the procedure..

-----update-----i guess the client is just doing what it is suppose to do when you have a routing loop and the client is getting a syn instead of a syn-ackcase closed -----------I have a recently created FWSM context. Currently i have a rule says."an...

I just had a customer ask me a question which I couldn't answer. Can any of the 8 switch ports on the ASA 5505 firewall be set up as a mirror (analyzer) port so they can plug in an Ethereal/Wireshark laptop and watch traffic?(I didn't think so, but m...

Greeting everyone!I have a problem configuring an ASA 5510 for our client network. The idea is to protect the core (192.168.20.0/25 network) from the following:-(1) A broadband connection with a static IP (59.94.30.38), whose sole purpose is to make ...

We're in a semi-managed environment, and I don't have an internet-facing router. Normally, I would grab bandwidth usage stats from the WAN port of a router via SNMP/MRTG. Unfortunately, the router is owned by the hosting company, and we rely on their...