Network Security

Can anyone advise what are the OIDs to use to monitor the xlate count (show xlate count) and conn count (show conn count) for a PIX firewall?

I upgraded my vpnclient from 4.6.04.004 to 5.0.01.0600 and now traffic is not passing between the ASA5510 and the PC. The same is happening between the PIX515e and the PC. The connection is establishing fine. It worked on the older vpnclient. What co...

If I carved up a asa5550 into 50 virtual FW's, can each of those Virtual FW (security contexts) support their own independant DMZ's?

Dear NetPro folks,I've been working on a homologation process for the deployment of Cisco ASA 5520 appliances and I've been unable to successfully make use of static NAT/PAT in order to translate services from the outside pool of IP addresses to insi...

What are the requirements to upgrade your Cisco IDS/IPS to 6.X? I read that the bios version needs to be upgraded also for the 4215 model, is that the same for all Cisco IDS/IPS hardware platforms, ex. IDSM, ASA-SSM, and 4200 series?

Is it possible to connect two ASAs in active active manner as shown in the attached diagram? Can I assign same subnet addresses to two interfaces on an ASA? Alternatively, does the current ASA code allow the same VLAN ID to be used across two interfa...

I am trying to get a site-to-site IPSec VPN working over a corporate LAN. It works fine but for redundancy, I am trying to get OSPF working. I am using RRI on F1 to the R4 network into OSPF. The problem is that F1 announces that the next hop to R4 is...

I have just configured the firewall with all the standard configuration but I can not gain SSH access. I have attached the running-config below, can someone please let me know what am I missing. I have configured the SSH exactly as stated at :http://...

Our internet goes down after being up for about an hour. To get it back, I power off and power back on our Cisco Pix 515 E. Can anyone give me some guidance as to what the problem might be?Thank you in advance.

WE have our PIX version 7.2(2) using http inspection and set to drop protocol violations. The problem is, that it drops the Microsoft Updates. Anybody have an idea how to allow the MS Updates to work while still using the inspect http policy.

I just unboxed an asa 5520 and it has version 7.0.(6) on it. Figured I'd upgrade to start with. What is the difference between the asa and asdm codes on the box? I'll be using this device for two purposes. 1. Terminate ipsec PtP tunnels from remote l...

Hi thereWe need to check which certificate is used in a VPN profile. We can't use CertSubjectName because there are two certificates with different purposes but same Subject Name. The only difference is found in Serialnumber of the certificate.How is...

I'd like to know if anyone has seen this with a 3310 NAC appliance (HP Proliant). It doesn't apply to the 3350 appliance.I know there are two ways to load software into a NAC appliance, use an external machine or a KVM setup.We have noticed that when...

Hi all, Hi have an ADSL router with dialer wan interfaz and negotiating IP with the ISP. I am doing NAT as well. I have several static PATs configured for publishing some services. I have no ACL configured more than the one in vty line for ssh access...

Upgraded a 5510 to 8.0 yesterday. At some point last night all access to inside services from the outside stopped. After several hours of complete frustration today trying to get it back up I found that a command had been added. sysopt noproxyarp out...