Network Security

The ASA and PIX ver 7 up is supposed to work in a no nat-control mode (by default). Several discussion in the forum focus on the NAT and STATIC commands. What I really would like is an explanation on how to configure tha ASA to route traffic between ...

Could someone share IPS policy schema to interpret the structure of information received from IPS transaction server?Also, I am looking for references to documentation on IPS 6.x transaction server. Does that information exist somewhere?Thanks in ad...

Ive read through the NAC manual...but still couldnt find my the answer to my question...How does the switch know to route the traffic to the NAC in a L3 environment?Thanks

HelloI wan't opening up Port: 80, 8000, 8080 to internal 192.168.0.7 on the inside from the outside. It's to a DVR.It's a Cisco PIX 506E.PIX Version 6.3(5) interface ethernet0 auto interface ethernet1 100full nameif ethernet0 outside security0 nameif...

It seems that every other day/night my Tivoli server (snmp) reports interface down on my inside ASA (V.7.2(2)),interface, however I see no sign of any issues with the int, the int is up and has being for months and failover has never kicked in, I've ...

WHat is the purpose of having the management inf?

Typically, the static command is designed for one to one mapping and is not suitable when comes to scalability. On PIX 515e version 7.2 firewall, by default any internal users can access external web servers (high to low).However, for example, if I h...

Hi ,I have a query.I have hosted a server in the Inside zone of the ASA firewall.Whenever i try to access the url from inside i find the packet getting blocked by the firewall throwing an error "UDP flooding".After which i added a proxy and then when...

Hi, all, I am running 8.0(2), I am trying to set up IPsec RA on ASA. The IPsec tunnel from Client will terminate on ASA's Outside interface. It did not work, debug shows that ISAKMP connection request (UDP destination port 500) is either denied by A...

Hi Guys,I would like to setup a server behind the Cisco ASA 5505 device that is connected directly to the internet. I would also like to have about 25 users gave access to the server through VPN connections. Can someone please explain the user lice...

I have a 5 block range of ip's that our isp has given us. We use pat on the pix external address and use a static for the second ip in the range and both work fine. When I try to add a third static it doesn't work. No matter how I configure it I neve...

hi all, by default is anything allowed out of my firewall, does the permit ip any any allow everything out, ie all tcp ports? if I wanted to just allow web traffic out, would I delete the default allow all rule off and create one for tcp port 80 to a...

Hi,I hope you can help me since I'm having problems configuring my PIX 501. I have set e0 and e1 static ip addresses and they both comm. with their own segments. HOwever, I can't comm. from e1 through e0.I've set in both NAT (inside) 0 0 0 and outsid...