Network Security

I am extremely new to Cisco Pix and I've been asked to look into purchasing a possible upgrade to ours. I currently have a 515E which I am going to send to another site once I get the new one. My Pix is primarily used for VPN access to my network. On...

Installed a new PIX and want to secure both outside and inside using ACL's, etc.Anyone know of a good doc, perhaps on the Safe site?

Hi allthis is my architecture:Internet---->Cisco 877---->ASA5505---LANi have 20 remote users that need to connect to the LAN from anywhere using Internet.what is the best solution to implement VPN in my case.in the router or using the ASA. i want tha...

Hi there,I have configured a remote access VPN for a customer which has a BT router at home. The BT router assigns an address in the DHCP pool 192.168.1.0/24 to the customers laptop.The VPN assigns an address in the VPN pool 192.168.100.0/24.The 192....

I have a VPN peer that cannot connect to my end all of the sudden."debug cry isakmp" shows no attempt at all for the tunnel to try and come up from the remote end.They will be initiating the traffic and do not allow us to initiate to them.There is an...

We are a small company running an ASA 5505 and up until today, we've had about 10 mobile VPN users connecting from wherever they can get wireless access. Today we setup a seperate group tunnel for a development team that will also need access to the...

Some traffic has blocked from lan to DMZ. I want to allow all the traffic through it without blocking.

We would like to establish Voice connectivity to reduce calling cost between our two offices,one is in india and the other one is in dubai. We have not yet able to decide a cost effective tentative initaial setup between dubai and india ,,A dedicate...

Hello!Is it possible to clone the mac address of the wan interface on a pix 501?I would like to use it connected to a cable modem.

I have created a site to site tunnel between two organizations. Org A wants to limit Org B to specific TCP ports on the destination hosts. Can this be done on the Org A PIX? I believe I could limit it by changing the cryptomap ACL on the Org B PIX, b...

hi,each time i have a majpr upgrade to the AIP-SSM , it has to be restarted and the ASA will do a failover, is there a solution for this ? a way not to let ASA monitor the AIP-SSM ?

Hello,This is more of a conversation, looking for input on some issues that have come up while trying to get L2TP in place.The PIX in question (Pix 515 ver 6.3) has been running a VPN in tunnel mode that allowed cisco VPN clients to connect. However,...

How can i change the sensors time manually on my AIP-SSM-10 module installed in the ASA 5520 device .. ??i tried the clock set command but apparently its not supported on AIP-SSM-10 module.the ASA has the correnct time but the IPS does not... any ide...

OK, so I have a host that I want to allow to ftp to the outside. The problem is that I get these logger msgs when I try to ftp somewhere.4 Sep 19 2007 17:02:42 106023 128.205.32.51 PublicIP Deny tcp src outside:128.205.32.51/21 dst inside:PublicIP/...

hi all,suppose i have one server (x) on the inside interface of ASA which need to access server (y) on the DMZ interface of the ASA for specific port e.g. 25 & 21but in doing so the server (x) ip address e.g. 10.10.23.20 should be natted to (192.168....