Network Security

PIX515A to PIX515B, IPSEC tunnel. I can ping from inside subnet A to inside subnet B. I can ping from PIXA at CLI to inside subnet B. However, I can't ping from PIXB CLI to inside A. This doesn't make sense. As stated, I can ping from anywhere in sub...

Hi,I have a site to site vpn tunnel from the pix to the router.I need to see how much bandwidth is being utilized by the remote tunnel.Please advice what tool I need to use on the pix to check the bandwith for site to site access From pdm outside int...

I have a Cisco ASA 5505 as the gateway firewall and a internal mail server. Some mails send from some domains were queued in the ASA and delayed for several hours. After I have removed the option of protocol inspection on Security configuration. Afte...

Besides the ability for the ASA/PIX to provide stateful inspection in hardware; therefore, the ability to service more connections that a router running IOS firewall feature set......Is there any security advantage? "More hardened technology", or som...

Hello,I try to make G.729 calls with Nortel Softphone over VPN and firewall and it's curious but voice drops after a few seconds while signalisation still good. After 1 minute with no voice the softphone application crashes. If I use G.711 codec I ha...

Hi, What is a stateful feature in PIX firewall ? What is the difference between router access-list and pix access-list ?

Hello,An organization has a network infrastructure in which a BBSM generates access codes for limited authorized time periods to allow Internet web access to wireless guests. If a guest exhausts the period he must request a new access code.Now, if a ...

Login onto the console works fine but although the front page appears there is no information and no drop down menus has anyone got any ideasDatabase is up and running

What will be the effective licence count if ASA 1 is having 100 users and ASA 2 is having 100 users on active/active mode in 5540

Customer is saying that cpu usage is at about 85%. Researching docs about CPU usage in the pix, I found that some itens may be verified like "show xlate count", but I doesn't say what is the normal value for it. Another says to check that "memory blo...

Hi,is it possible in any version to implement the SMTP fixup interface dependent. For example implement fixup for incoming connection from the internet but not for internal connections ?regardsChristoph Ohliger

The other day we had a power failure and it broke our ASA 5520. We got a replacement and I placed the config on it. I also used the same cables and ports on the switch to reconnect it.After clearing the arps on our internet router and our internal ro...

hi - we're currently migrating from a meshed VPN network to a PIP/MPLS network, and i was able to get our Madrid network (10.70.x.x) to connect last week, but currently cannot get our Rome site (10.60.x.x) to connect using the same method - have been...

I created a deny ACL that we would like to track on our Syslog server. I entered the "Log" option and set it to level 3.I set "logging trap 3" and my syslog server is receiving messages. However the message from my ACL does not appear.If I turn on Te...