Network Security

We have two PIX firewalls for two different functions, not failover.Both PIX outside interfaces are in the same VLAN with edge router interface.The edge router gets the default route from the PE router and distributes it to the intside on both firewa...

I am sending Netflows from my 6500s to MARS. I seem to get a lot of events that have 0.0.0.0/0 as the source and a lot that show that address and port as the destination. Are these broadcasts?Also most of my Netflow events are "Sudden Increase in t...

I'm having a tough time trying to configure our PIX 515E to pull double-duty firewalling our two networks. Basically we have two inside (private) subnets (192.168.1.0 & 192.168.100.0) and two internet connections. One is a T1 and the other is a cab...

I have 8 IP addreses from my ISP. I want to use two of them on my new ASA 5505. I have configured one of the interfaces with our primary IP address but want to add a second. How do I set up the ASA 5505 to use more than one IP address on the same WAN...

Need to configure ASA 5505 to allow remote desktop session from Internet (outside) to server on inside interface.DSL modem is in bridge mode. I have a single live IP configured on outside interface (it's the only live IP I have for that site...lease...

I have recently deployed two ASA in Active/Standby failover mode. When a users goes to a site such as hotmail.com, the connection appears to be blocked, generating the syslog message below. Sep 17 13:12:19 gateway-fw-i %ASA-5-304002: Access denied ...

Hello, I was wondering if anyone knows the configuration registry code to force an ASA to boot from the saved configuration on a flash drive? I'm looking for a 0x? solution. Any help would be appreciated!!

Riddle me this.....Given an ACL that has the following line in it:access-list TEST-NONAT extended permit icmp host EDISRV host X.X.X.XWhen I attempt the following I get this error message:ASA(config)# nat (INSIDE) 0 access-list TEST-NONATERROR: acces...

Hi,My VPN through Cisco 1812 dropped second time. In SDM Syslog there were in both time the next lines:Crypto engine: onboard 0 State changed to: InitializedCrypto Engine: onboard 0 State changed to: EnabledInterface FastEthernet1, changed state to u...

Hi folksI need some input and ideas how to best set up my IDSM2 module.Today I have the module set up to capture traffic from the 6513 using SPAN in both directions and two different firewalled VLANs as sources. The destination is data-port 1 on the ...

PIX515A to PIX515B, IPSEC tunnel. I can ping from inside subnet A to inside subnet B. I can ping from PIXA at CLI to inside subnet B. However, I can't ping from PIXB CLI to inside A. This doesn't make sense. As stated, I can ping from anywhere in sub...

Hi,I have a site to site vpn tunnel from the pix to the router.I need to see how much bandwidth is being utilized by the remote tunnel.Please advice what tool I need to use on the pix to check the bandwith for site to site access From pdm outside in...