Network Security

Hi,I have some questions regarding the ids module. A router is connected to the internet and is using the software firewall. There is also a NM-CIDS in the router.1) What is the sequence when a packet arrives from the internet?Is it internet -> firew...

Hi All,I am new to the ASA and trying to set up NAT to allow a web server to access port 1433 on an inside sql server. I have been able to successfully use the static nat command to open port 80 and 443 from the outside interface to the dmz but can'...

Simple one here: I have a new ASA running version 8 and need to know how to change the default telnet password from cisco to something else. Thanks.

It was suggested to me that the ASA (5510 v.7.2(2)) was capable of offloading SSL encryption (like a proxy might do).The intention is to take port 443 SSL traffic and decrypt using a certificate on the ASA then pass the unencrypted port 80 traffic ba...

Our central office has a VPN 3005 and a PIX 515. The VPN 3005 is the hub for 7 branch offices/spokes - each of which has a PIX 506e. The PIX 515 serves as the firewall for the cental office.From what I can tell, the ASA devices don't suffer the sam...

I am involved with a re-ip addressing project in which I need to change the IP address of numerous host objects that are members of Network Object Groups. I have an ASA 5520 running version 7.2(2) and utilizing ASDM ver 5.2 When I change the ip add...

I'm having a little trouble figuring this one out. I have a client that is connecting to mindspring and earthlink mail servers using port 587. The IP's are being NAT'd and there are two lists involved. The users cannot send or recieve email and are g...

we have a pix 515e with pix version 7.22and I want to store this binary file on a tftp server, but when I use the copy command 'copy flash tftp' I get an error message like 'Inappropriate file type or format'

Hi All, Please help me to stop this application."It is the flagship software product from UltraReach Internet Corp. for Internet anti-censorship. It enables users inside countries with heavy Internet censorship to visit any public web sites in the wo...

does anyone have links on configuring ip sec lan to lan ipsec tunnels

Hi, i have several site to site VPNs on my ASA so i am obliged to do : "no sysopt connection permit-vpn" in order to deny access to people from other sites to access my network, but as i do so i cannot access the ASA with remote vpn, i can still acce...

Hi Everyone, Please i need to know if Cisco ASA 5500 security bundle part no. SF-ASA-AIP-6.0-K9 is an IPS/IDS module and is enough for me to install on the firewalls that forms my perimeter defense.

We are having PIX 535 7.0(5) in Active/Active configuration.In admin context its showing high CPU utilization.Can anybody tell what might be the reason.ThanksVaishali

hello newbie questioni am trying to access the web interface of a asa and i put the following commandsand it asks for a username and passwordwhich is not defined on the asahttp server enablehttp 172.17.14.138 255.255.255.255 insidewhat else do i need...

Hi All,I am not trained on pix but I was wondering if a TFTP server had the same benefits for PIX DHCP as for a CISCO Router DHCP?Thanks - Ed