Network Security

Hi All,I am a bit confused, we are looking into troubleshooting some issues with MSS and I came across 2 parameters which I am not sure if they both serve the same purpose....1) sysopt connection tcpmss 1380According to cisco description, this sets t...

Thanks in advance!We're setting up a web server farm consisting of web, SQL, FTP, and domain controller servers. The data centre provided us 2 10Mbps Ethernet connections with 3 public static IPs each on primary subnet, and additional 14 public stat...

Hi guys Please is there any link on CCO that clearly states the conversion between PIX and ASA of clearly shows how the commands changed.Any other gotchas on the conversion.your Inputs will be appreciated.RegardsHash

Hope some one can point me to the right direction. Just procure a Metro-E Direct Internet Access (10MB), the provider actually is running ethernet over SONET. Anyway, they hand over a cat 5 into a router (Cisco2620), it's fastethernet port to my swit...

We have a client that has an ASA5505 in transparent mode. The ASA is working ok and the user can access the ASA via ASDM, telnet and ssh from the inside, but we are not able to access the ASA from the outside via SSH or ASDM. The commands http 0.0....

access-list outgoing extended permit tcp any host x.x.x.x eq wwwaccess-group external in interface outsideaccess-group outside_access_out out interface outsideaccess-group outgoing in interface insidei want to know what is benefit of access-group out...

i ask if i need to write at the end of ACl this commandaccess-list outgoing extended deny ip any any

We have a very simple setup. Have a single T1 line coming into our office and would like to connect to the internet through our 506e. We had it working just fine at our old office through a DSL line.I though it would be a simple matter of changing ...

I created a subinterface on a PIX-515E (7.2.2) but I cannot arping it unless I set the switch port to "switchport mode trunk".But then the main interface on the PIX stops working, failover claims the status of the main interface is "unknown" and the ...

Hello All, I am seeing a unique problem whenever I create Network Object group in PIX firewall an other Network Object group with same name_ref is also created on the firewall.For example, I created a group called webserver group an new group called...

I have 2 ASA . One is primary and the other one as secondary So if 1- I upgrade the primary ASDM version it will effect in the running configuration to be deleted or down2- If I upgrade it will effect on the secondary or I must upgrade the primary an...

I am attempting to redirect port 3390 to an internal ip while remapping it to port 3389. I have tried using a different source and destination port but it does not seem to work. Can anyone tell me how to redirect to a different internal port?

I want to make an EzVPN site-to-site tunnel with CSM. The client side has a private ip address on the WAN interface. My problem is that I can not access the private ip address via the internet. However when I want to set up an EzVPN connection with C...

I've a PIX-515E running 7.2.2 and I'm trying to create a secondary IP address on the outside interface. It's like having eth0 and eth0:0 on Linux.If I run "ip address ..." in config-if mode, it just replaces the existing address.I'm not sure what els...