Network Security

We're configuring a firewall with 3 interfaces - inside, DMZ & outside and are trying to figure out what is the typical traffic flow for a firewall..Does the packet that enters from the outside, first goes out the DMZ interface, where the destination...

I am a newbie to the Pix. I am trying to understand the running config list. The question I have is what does the command line mean:access-list inside-outbound deny tcp 10.1.2.0 255.255.255.0 any eq 135Does it mean deny TCP 135 traffic from outbound ...

dear guys help in pix 525 configurationi have pix525 with active /standby license what i have to doand right now i cant ping from my inside of pixfirewall to dmzzonei cant understandi appliend nat ,global,acces-list still its not pinging my secanrion...

I'm moving from a Pix515e Failover set to an ASA5520 Failover set, and ending up with 2 less interfaces on the ASA. Is it a given that I should allocate 1 interface each for outside, inside, and failover - and then put all my DMZs on sub-interfaces o...

Hi,I am trying to find out if I can configure an ASA 5510 to hold down 2 external WAN links for load balancing?If it could load balance itself it would be good or could I do something based on the inbound source IP's (i.e. ip's 192.168.20.1 to 20.100...

Hi I have Multiple branch offices connected with Headquarter with Via VPN tunnels using small routers.They are all connected to Cisco 3000 Concentrator. I want all sites to talk each other directly. What are my options?Thanks

Greetings,My logs on my ASA are screaming with error 402119, which corresponds with ESP packets failing anti-replay checking. It's only for two different users, but when it happens, it happens about 75 errors right in a row in my logs. I know in IOS ...

We have been trying to reinstall the config via hyperterminal after one of our engineers saved dodgy config that now prevents us access to the unit any other way.When loading the backup config as a txt copy and paste, a lot of the objects return a me...

I have a pair of ASA 5540's and would like to connect to my secondary (failover) unit. Is it possible to do it without consoling in? I'm using Active\Standby with a LAN failover cable. The reason is I upgraded the ASDM on the active one and not sure ...

Hi,I'm trying to allow access from a remote office to a central office:They're both connected to the inside interface.I'm trying to get to a Print Server on 192.9.200.123 from 172.25.50.200. I thought it was a case of just enabling hairpinning. At th...

Please help, this is really an emerrgencyI've gone thru 7 cisco techs (escalation team, backbone team, etc., etc,) and no luck.Network behind ASA 7.2 is 10.21.30.0Network behind IOS 1841 is 192.168.1.0Packets originating at IOS side and destined to A...