Network Security

Hello,My pix is reporting the following message.Dropping TCP packet from outside:xx.xx.xx.xx/3389 to inside:xx.xx.xx.xx/60983, reason: MSS exceeded, MSS 1260, data 1460I read the article posted on the cisco website and the provided workaround did not...

We are in the process of adding a wireless network to the existing LAN. The requirement is that wireless clients have access to the internet, and occasionally access to the internal webserver. But, at no time should wireless clients be able to access...

I have an MPLS connection running through a pix (7.1.1) running in transparent mode but am unable to filter any of the MPLS traffic. I can ping and telnet through the pix but never see anything in my logs or connection table apart from the UDP/711 an...

i am having 2*FWSM modules.Please let me know how to configure failover in it.Should i had checked all the cisoc doucmnets but no relevant solutions found.Please send me the configuration in intra failover.

I am setting up a new asa 5520 and have no problems from the subnet that the subnet that the firewall is on. But from my wireless subnet I cannot reach the internet. I added a route from the wireless subnet to the gateway subnet and it doesn't connec...

I have getting this error in the log when trying to access FTP outside our LAN. Could anyone tell me what's wrong?6|Jul 04 2007 18:53:33|302013: Built outbound TCP connection 1601826 for outside:207.46.236.102/21 (207.46.236.102/21) to inside:192.168...

Evertime I use the following statement :nat (inside) 0 access-list inside_aclI get the following warningaccess-list protocol or port will not be usedand nothing works. if I substitute the nat 0 command with a one to one static command iestatic (insid...

You can explain about the differents of transparent mode, single mode, multiple context mode in ASA 5500? Thank you very much.

I was trying to configure a fwsm on catalyst 6500 running native IOS. FWSM running latest 3.2.1 code. I remembered that I have access-group in PermitAll outside and access-group out PermitAll outside applied. Also ssh is permitted from my workstation...

hi alli am getting eror during SNMC_CoreSwitch(config)#firewall vlan-group 1 1error:-Vlan 1 can not be a secure vlanIf i change the ip of vlan 1 thn my ospf neighbor ship is not establishing.Vlan 1 is connected to outer world.So please help me how to...

Hi Everyone, We have a setup on an ASA with two ipsec tunnels. One to Site A (10.0.1.x) and one to Site B (10.0.2.x), incidentally Head office where the ASA is located is 10.0.0.x, we now need to set it up so that Site A can communicate with Site B. ...

can anyone let me know whow FWSM works with the 65XX and 76XX.shivlu

Hello,Was trying to figure out how to permit DHCP through an ASA when it was in transparent mode. I was originally thinking I needed to use DHCPRELAY but its only available in routed mode. I was trying to log everything and see if I could see my dhcp...

hi alli am attaching the connectivity diagram.We are using in vlan 1,5,7,11,15 in the 6513 switch.Alos this switch has 2*FWSm modules.Now i am not able to understand how to select the insode and outside interface vlan.I had created a vlan-group 1 and...

Hello.I am doing pre-deployment testing for 7.2 on a PIX535. I started pumping engineered ICMP traffic from IXIA at 75MB and 64 frame size just for traffic flow validation (allowed via ACL). For some reason, the CPU spiked to 99%. I was under the imp...