Network Security

Hi, A client of mine is looking at controlling user access to the Internet based on identity. I know Microsoft ISA and other proxy solutions would do. However, I am looking at leveraging their present installation of ASA and Microsoft AD to provide t...

I has tried migrating the PIX os from 6.2(3) to 7.2(3). After the upgrade relevant configurations has changed to the new command syntax. But i got an error with the NAT acl "access-list has protocol or port" and iam unable to go thro' the entire stat...

Trying to get a VPN tunnel up from an ASA 5505 to a Watchguard X1000 firewall at our colo. I'm a total newb at Cisco VPN configs, so I've probably got something monkeyed up...By the debugs, it looks like Phase 1 and Phase 2 both are coming up, but th...

Hi,Because same subnet are being in use between two sites local network. we have configured NAT overlap on IPSec VPN tunnel using ASA 7.0 and its working fine.But now on site where overlap NAT has been configured, users can not access internet.if we ...

Hi,We have a FWSM module in 6513 core switch which acts as the gateway between Vlan's.We have an exhange server in one VLAN and now we face a connectivity problem to this server on port 25 from other VLAN's. The port is open and no restrictions are t...

Hello,I've a Cisco ASA5510. I need to redirect the traffic originating from some IP addresses from inside interface destination port 80 to a proxy server, located in the inside interface, port 8080.For people who works with linux/iptables, I need som...

Traffic is fron Inside to Outside. When users from Inside connect to a host on the Outside with destination IP of 10.244.87.1, the pix should translated to 10.244.86.1. The documentation said you can use static for Lower to Higher security. This ...

I am in the middle of a Checkpoint to ASA conversion and so far it's gone pretty well.My current problem though is that Checkpoint allowed for me to create an ACL that I could specify a group I created called RFC_1918_Group would not be allowed comin...

Actualy i can ping from inside to outside with ip 192.168.101.11, but can't ping from ip 192.168.101.123.I have also post the running config.Plz reply back asap.thanks

I am unable to find documents on CCO that explains error messages on ASA5520. "%ASA-2-106001: Inbound TCP connection denied from x.x.x.x/1266 to x.x.x.x/22 flags SYN on interface outside" registered on ASA5520 7.2(2)22. Does anyone know what this m...

Hi all,I have an odd problem on two PIX515 on two seperate customer sites.The customers are able to access alll web sites OK through the PIX (http and https) with the exception of the personal banking pages of HSBC and FirstDirect.Does anyone have an...

I'm seeing a lot of events in our ASA logs for 106001 relating to external source TCP (port 80) connections being denied inbound to our PAT address. The sources are all valid web sites which users are accessing. If a source inside connects to a websi...

Hi all,All is in the title !Is there a way to reset a PIX515 to default configuration FROM MONITOR MODE.Why in monitor mode ?In fact I have sent a configuration using tftp into startup and reloaded the PIX. After this, the PIX boot normally until the...