Network Security

Hi all,I need to upgrade my PIX 525 from current version 7.0(4) to a more recent one: 7.2(2).I have a doubt because the new code is larger than the current one. And I have not enough space in memory to put both codes at the same time. So I think the ...

Hi everyone,I have seen the following message on FWSM 2.3(4).%FWSM-4-209003: Fragment database limit of 200 exceeded: src = xxx.xxx.xxx.xxx, dest = yyy.yyy.yyy.yyy, proto = tcp, id = 19923xxx.xxx.xxx.xxx is clientyyy.yyy.yyy.yyy is WEB serverThe foll...

Hello,I'm using PIX 515. One of segment connected to this Pix is network 10.12.187.0/24. On this network is router Cisco 1841, which connect networks 10.12.188.0/26 and 10.12.187.0/24.The problem is that host 10.12.187.x, which has default gateway Pi...

Hi,I have just setup and installed a PIX 506e firewall. Would like to check I haven't left any services open from inside to outside and vice versa.Do you know a scanning device in order to check both TCP and UDP services allowed through firewall (My ...

Does PIX 515 (6.1 & 6.3) support subinterface?

hi,please help me,i have got the ASA5550 two number with the same ios asa712-k8.bin both are running in the active/standby failover. the problem is that the failover runs ok for some time however after some time both the firewall status becomes activ...

I have a big issue with spamimg, I need to know if an ASA5505-SEC-BUN-K9 or an ASA5510-SEC-BUN-K9 are able to stop the spaming or must I purchase an CSC-SSM module.

My PIX 525 booted up during the day. I have not figured out why it lost power, crashed, reboot, etc. Syslog doesn't show anything abnormal. I have issued the show crashinfo command but nothing has been saved. This leads me to the point of this discus...

Hi I try to enable IOS IPS on my 7204-G2 router but have few problems.I use IOS c7200p-adventerprisek9-mz.124-15.T1 and signatures IOS-S297-CLI.I use this doc http://www.cisco.com/en/US/products/ps6441/products_feature_guide09186a0080747eb0.html .At ...

Hi,I've always read we should not configure dynamic routing protocols on Firewall. Why?We can control routing updates using route filters and allow what updates should be allowed bet rouer/fw then what is the harm in configuring it.?Can someone pleas...

I am wondering why it is not possible to fetch the arp table off a ASA running version 7.2? Is there a plan to implement that useful feature in further release?

Hi guys..this is only a simple question...I cant view or access our PDM tools of PIX515.Ive tried it already in browser but nothing happened.should i download it?by the way our version is 6.3..many thanx

We have a list of 3 domains that we cannot access. We just get "The page cannot be displayed" message. The domains aremetriceng.comqrinc.comcorgan.comWe are able to resolve DNS just fine. However, if I point the default gateway on my system to our fa...

I have ASA5510 set up. By using NAT, the inside hosts can access internet. If I want to just block certain hosts, for example (ip: 192.168.1.112) to access internet. How do I do it?