Network Security

Hi!Ifip inspect log drop-pktis enabled I see a lot of the following error messages:%FW-6-DROP_TCP_PKT: Dropping tcp pkt 10.1.1.120:2740 => 10.7.1.6:25 due to Stray Segment -- ip ident 48234 tcpflags 0x5004 seq.no 2494264063 ack 2494264063What does t...

Hello I am currently terminating my ISP's PPPoE connection (static IP) on my Cisco Soho77, and then using an internal IP on my firewalls outside interface and therefore double natting. I dont have a problem with this (makes me feel moer secure) but w...

i have a problem on my FTP from my dmz to my internal network when backing up data. it seems to time out and but i can check the inside server where the data from the dmz was transfered, it seems to have the file. i have already configured a:static (...

PIX 515 running 6.3(3) code, been running for years. All of the sudden, any STATIC NATs I have configured stopped working (including my Email server and Webserver); if you take them off of Static, and put them thru the PAT they get out just fine. An...

Hi can anyone recommend which one to purchase. All i require is a bogstandard fast firewall that will not drop packets due to fast burst

I keep seeing the following error messages on FWSM.106007: Deny inbound UDP from rs-dc2/53 to fs-secweb001/1026 due to DNS ResponseBoth servers are are on sperate interfaces. rs-dc2 is a windows 2003 server and fs-secweb001 is a web server that is o...

Hi .. I am currently preparing a solution and would like to know whether is it possible to bridge two physical interfaces on the ASA (I am not talking about transparent firewall) the way you can do it with a router using bridge groups ... Any comme...

Hello everyone,Is there a way to protect against operating system detection using Cisco PIX similar to "mangle" feature of IPTables that allows modification of response packets from the server behind the firewall to imitate some other operating syste...

hi,We have Ciscoworks Lms2.5 installed on windows server. It was working ok suddenly after a rebbot i am not able to login to CiscoWorls LMS. It accepts the username and password and then it is blank page.I rebooted server 2 times but the situation i...

Dear All,I am running a PIX 515 with OS 6.3(4).The PIX has three interfaces outside, inside and dmz.There is an exchange mail server in the dmz area. Its IP add is 192.168.1.10. And it is natted to an outside address like 1.1.1.1 for example. At the ...

Hello pips!I have a problem when upgrading my Cisco PIX ASDM. I upgrade my PIX 515E to pix707.bin, GD version and its ASDM v5.0.7 (link can be found here http://www.cisco.com/cgi-bin/tablebuild.pl/pix).I successfully upgrade my PIX OS to v7.0.7 but w...

Implemented ACLs on FWSM but could not see them on ASDM, what could be the cause?

What are the best way to migrate Cisco VPN 3030 Concetrator to Cisco ASA 5540?What are precautions we should take??Please advice me .. thanks for your help.

I am trying to block access to urls that include a certain file name as part of an exploit. Here is a sample URL:http://www.someplace.com/index.php?exec%20udp.plWhat is usually common in the exploits I am looking to block is the udp.pl. Here is wha...