Network Security

We have a pix 501. I have a primary Ip on the outside interface of 68.x.x.21I have a secondary IPaddress of 68.x.x.17 that handles incoming mail request. Tne problem is when I send mail through this pix the ip address shows up as 68.x.x.21 and not 68...

We are changing our T1 server to an other company; I know I need to change the IP address to the new provider on the outside, do I need to change the translation table and all ACL?s assoc with the old IP address. It would greatly appreciate if someon...

The ASA 5520 is configured for Transparent mode. Whenever I telnet to the ASA management IP address via telnetting from another device such as a 3560 or 2960 switch and issue a "show run" command, I receive a partial output of the ASA config, then th...

I have configured my ASA5520's for active/standby failover and I keep getting this warning everytime the active replicates to the standby:WARNING: tunnel-group <tunnel_name> Does not exist. Has anyone seen this before?

I do have a 6509-E with the FWSM module, I created two context within the FWSM, context A and context B, both in transparent mode.Context A is "conected" to the MSFC via BVI with the IP 192.168.180.2, the MSFC IP for VLAN180 is 192.168.180.1, in cont...

I have Pix 501 firewall and need to open ports 5631 & 5632. Can anyone provide me with step by step instructions? Thanks

I can ping the FWSM interface that is directly connected to my inside network, but I am unable to ping outside interfaces. All applications(like http, ssh etc) from inside network to outside works fine. I can also ping switch's vlan interface which c...

What is the best way to accomplish making a baseline for our machine with rules and such? I feel like I'm constantly having to make exceptions for applications and such. I know it depends on the complexity of the environment but I would like to not h...

HiI'm trying to install fcs-csamc-5.2.0.203-w2k3-k9 (CSAMC) on a Windows 2003 Standard R2 SP2 server, but the installation routine fails with the error msg "Failed to set the "SA" account password". This server is currently not in any domain and it i...

Hi,IPS 6 can make virtual IPS, likely FWSM can make virtual Firewall ?Anybody have the link for IPS 6 can make virtual IPS?rgds,Jerri

Hello --Is there a best practice doc that explains how best to deploy NAC? Also, is it possible to deploy the NAC agent remotely?Please let me know.Thanks,Ohamien

Hi,I have some IPS sensors ( IDSM, NM-CIDS, appliances), how can get one license for all devices to manage them fro Cisco security manager 3.1, also which is better managing them from CSM3.1 or VMS2.3ThanxNa?am

We have a MARS appliance and we have syslog setup on our ASA to send to it. For hosts that we have a name created in the ASA (Using Names command) it puts the name in the syslog message. Is there a way to have the syslog send the IP address instead? ...

During Ftp transfers on C2821 (ios c2800nm-advsecurityk9-mz.124-12.bin), I have:CBAC FTP sis 45D06014 FTP-Client: PASV~~CBAC FTP sis 45D06014 FTP-Server: 227 Entering Passive Mode (88,191,49,209,237,189).~~CBAC FTP sis 45D06014 Handle response to PAS...

Hi Netpros,This is my situation .. it is regarding to Webvpn access using the Cisco SSL VPN client.No rocket science .. I only need to provide full tunnel to some users and split tunneling to others (I know you can use the Cisco VPN client but that i...