Network Security

does anyone know if its possible to have two routers at a remote branch (one primary, the other backup with HSRP) connecting back via IPsec VPN's to a Head office PIX 515E with ver6.3.5. When I lab the scenario, the pix seems to get confused in fail-...

hi all,can any one help with the diff. between these two pix commandspix(config)# clear access-listpix(config)# clear configure access-listall cisco documentations says that the second command clear the acl from the running config, so if i do copy ru...

i was wondering if i could allow my DMZ network to be accessed by my remote LAN... I currently have a IPSEC VPN tunnel on my local lan to my remote office's local lan. now my currently need is to enable my remote office's local lan to access the dmz....

HI Guys,I have a little problem that I am failing to resolve. We a mail relay server with two interfaces connected to the same network in between to firewall. The problem I have is that emails coming from the Internet (81.165.24.244) are translated ...

Trying to set up ASA 5505 to allow IPSEC passthru for AT&T Global network Client VPN.

Hi All,I am a bit confused, we are looking into troubleshooting some issues with MSS and I came across 2 parameters which I am not sure if they both serve the same purpose....1) sysopt connection tcpmss 1380According to cisco description, this sets t...

Thanks in advance!We're setting up a web server farm consisting of web, SQL, FTP, and domain controller servers. The data centre provided us 2 10Mbps Ethernet connections with 3 public static IPs each on primary subnet, and additional 14 public stat...

Hi guys Please is there any link on CCO that clearly states the conversion between PIX and ASA of clearly shows how the commands changed.Any other gotchas on the conversion.your Inputs will be appreciated.RegardsHash

Hope some one can point me to the right direction. Just procure a Metro-E Direct Internet Access (10MB), the provider actually is running ethernet over SONET. Anyway, they hand over a cat 5 into a router (Cisco2620), it's fastethernet port to my swit...

We have a client that has an ASA5505 in transparent mode. The ASA is working ok and the user can access the ASA via ASDM, telnet and ssh from the inside, but we are not able to access the ASA from the outside via SSH or ASDM. The commands http 0.0....

access-list outgoing extended permit tcp any host x.x.x.x eq wwwaccess-group external in interface outsideaccess-group outside_access_out out interface outsideaccess-group outgoing in interface insidei want to know what is benefit of access-group out...

i ask if i need to write at the end of ACl this commandaccess-list outgoing extended deny ip any any

We have a very simple setup. Have a single T1 line coming into our office and would like to connect to the internet through our 506e. We had it working just fine at our old office through a DSL line.I though it would be a simple matter of changing ...

I created a subinterface on a PIX-515E (7.2.2) but I cannot arping it unless I set the switch port to "switchport mode trunk".But then the main interface on the PIX stops working, failover claims the status of the main interface is "unknown" and the ...

Hello All, I am seeing a unique problem whenever I create Network Object group in PIX firewall an other Network Object group with same name_ref is also created on the firewall.For example, I created a group called webserver group an new group called...