Network Security

Hy!On our FWSM there are some PAT about ~500 hosts. The DNS server should have a static NAT, some servers should have some port forwarding. I set those but DNS server & other servers can access only from VLAN60. Offices's PAT is work fine but I can't...

Hi friends,There is a Nortel VPN client using RSA SecureID authentication to connect to the server.Since the VPN clients are behind a PAT device viz. ASA firewall, we have told the VPN headend IT staff to add NAT-Traversal on their VPN server.But the...

Okay, so I have a 1710 with a vpn module. I have a site to site vpn setup and is currently functioning just fine. My question is: can i have remote access users using the cisco vpn client connect in while that site to site tunnel is up? If so, how ca...

Hi,Is it possible to ping the outside interface of a PIX from the inside.no nat-control is enabled. and I have permitted ICMP's to the outside interface from any.Thanks

Bought a 501 pix for business and cant even get it to connect to the internet from my basic setup at home with a cable modem. I've never used cisco products, but thought the 501 would be a fairly easy one to setup. As i mentioned, i've tried unsucc...

HI guysI have a pix 515 with os ver 7.2.2. I want to let users in inside can ping and tracert ip address in internet , who can i do that?

how do I upgrade my ios to one with a firewall. i can not download a update with my account

How can I tell how many events per second our MARS 100 is receiving?

Dear AllI tried to translate global IP( Ip address on outside) to local IP (Inside)but i couldn't find the right commands to do it. Thank you in advance

Setting up a 4215 with 4FE. VER 6.0(1)E1 sig S268.0 Just getting familiar with system. I've placed the f0/1 int on internal net and span to the 4215 f0/1. Question: Do you need an alternate tcp reset interface if running promiscuous? If so where woul...

i had an internet Router and my ISP wants to monitor internet utilization for that he suggest me to configure SNMP strings and he had given me his server IP address (NMS).Please help to get me some cisco document which helps me to understand.a) how t...

Hello,I have a PIX 515 running version 7.2.2. I want to inject a default route on the inside and on the dmz only. How do I do this? I tried to use the default information originate command but it also inject the default route into the outside interfa...

Hi I have an ASA 5520 running an IPSEC tunnel to a 3825.Everyday the tunnel drops and the following message appears in the logs.%ASA-1-713900: Group = 10.254.254.45, IP = 10.254.254.45, construct_ipsec_delete(): No SPI to identify Phase 2 SA!I though...

Hi ,this morning , I tried to access one of my firewall via https and during to config load , it crashed and the pdm gave me some alert and I had to close IENow I can't connect anymore . It does't even go to the login promp via telnet.Is there anythi...