Network Security

Traffic is fron Inside to Outside. When users from Inside connect to a host on the Outside with destination IP of 10.244.87.1, the pix should translated to 10.244.86.1. The documentation said you can use static for Lower to Higher security. This scen...

I am in the middle of a Checkpoint to ASA conversion and so far it's gone pretty well.My current problem though is that Checkpoint allowed for me to create an ACL that I could specify a group I created called RFC_1918_Group would not be allowed comin...

Actualy i can ping from inside to outside with ip 192.168.101.11, but can't ping from ip 192.168.101.123.I have also post the running config.Plz reply back asap.thanks

I am unable to find documents on CCO that explains error messages on ASA5520. "%ASA-2-106001: Inbound TCP connection denied from x.x.x.x/1266 to x.x.x.x/22 flags SYN on interface outside" registered on ASA5520 7.2(2)22. Does anyone know what this mea...

Hi all,I have an odd problem on two PIX515 on two seperate customer sites.The customers are able to access alll web sites OK through the PIX (http and https) with the exception of the personal banking pages of HSBC and FirstDirect.Does anyone have an...

I'm seeing a lot of events in our ASA logs for 106001 relating to external source TCP (port 80) connections being denied inbound to our PAT address. The sources are all valid web sites which users are accessing. If a source inside connects to a websi...

Hi all,All is in the title !Is there a way to reset a PIX515 to default configuration FROM MONITOR MODE.Why in monitor mode ?In fact I have sent a configuration using tftp into startup and reloaded the PIX. After this, the PIX boot normally until the...

I've been trying to make this work and have had no luck. I've got a 515E running 7.0(2) and attempted to use this command to allow hosts on my 172.17.150.0/24 subnet to browse the website on 69.90.71.85 ; static (outside,inside) 69.90.71.85 172.17.15...

I have a client that sends periodic bulk mail to their members. When they do this it completely floods their DSL connection.Is there a way with an ASA5505 to do packet shaping to limit the amount of smtp traffic to no more than 50% of their upload sp...

Hi All,I have 2 pix firewalls in failover mode. All of a sudden the primary started dropping all traffic on the inside interface.when doing a sh log I was seeing litterally hundreds of Deny UDP reverse path check errors on the inside interface. the l...

On the WAn egde which is best technology to use among PIX and cisco IOS firewall?

Is it possible to do clientless SSL VPN to a Pix? I believe this is possible with the ASA 8.0 code. But I am having finding that specific about the Pix in my googling. Thanks.

hi all, i'm getting a lot of dropped packets in ios firewall. Anyone can enlighten me why there are these few default dropping functions ? what are the effects on my network? how do i disable/tune the dropping mecanism ?Due to RST: 503024: Sep 3 10:3...

I would like to know if the ASA5505 supports load balancing of dual ISPs, the docs say they do but all the configs docs talk about failover only. Has any one configure an ASA 5505 so that i would load balance 2 ISPs, I have a lot of users (for the ba...