Network Security

Setting up a 4215 with 4FE. VER 6.0(1)E1 sig S268.0 Just getting familiar with system. I've placed the f0/1 int on internal net and span to the 4215 f0/1. Question: Do you need an alternate tcp reset interface if running promiscuous? If so where woul...

i had an internet Router and my ISP wants to monitor internet utilization for that he suggest me to configure SNMP strings and he had given me his server IP address (NMS).Please help to get me some cisco document which helps me to understand.a) how t...

Hello,I have a PIX 515 running version 7.2.2. I want to inject a default route on the inside and on the dmz only. How do I do this? I tried to use the default information originate command but it also inject the default route into the outside interfa...

Hi I have an ASA 5520 running an IPSEC tunnel to a 3825.Everyday the tunnel drops and the following message appears in the logs.%ASA-1-713900: Group = 10.254.254.45, IP = 10.254.254.45, construct_ipsec_delete(): No SPI to identify Phase 2 SA!I though...

Hi ,this morning , I tried to access one of my firewall via https and during to config load , it crashed and the pdm gave me some alert and I had to close IENow I can't connect anymore . It does't even go to the login promp via telnet.Is there anythi...

unable to lanuch asdm from 192.168.2.1the device 192.168.2.1 dose not have the apporpriate device manager image installed

We just upgraded to the Cisco Security Manager 3.1. I am looking for the "local" URL for the NSDB. All I found in the documentation is "In Security Manager, the table in the content area of the IPS Signature policy contains several columns by default...

I am still running VMS 2.3 and Security Monitor 2.2 to manage and monitor my IPS and firewalls. I upgraded from PIX's to ASA 5510's and noticed that I cannot see the ASA syslog events under the Event Viewer anymore. The ASA devices are still logging ...

I have configure a L2TP VPN with dynamic map. My users connect perfect, but I would like to tunneled only traffic to my network, and let web and mail traffic use their internet connection. I did use "split-tunnel-network-list" but it did not work. Me...

Hi, I have recently purchased an ASA 5505 v7.2(2), and have been unable to send SMTP through it. The effect of the problem seems similar to other postings I've read, where disabling fixup/inspect esmtp resolves the problem. I've done this, but to n...

does anyone know if its possible to have two routers at a remote branch (one primary, the other backup with HSRP) connecting back via IPsec VPN's to a Head office PIX 515E with ver6.3.5. When I lab the scenario, the pix seems to get confused in fail-...

hi all,can any one help with the diff. between these two pix commandspix(config)# clear access-listpix(config)# clear configure access-listall cisco documentations says that the second command clear the acl from the running config, so if i do copy ru...

i was wondering if i could allow my DMZ network to be accessed by my remote LAN... I currently have a IPSEC VPN tunnel on my local lan to my remote office's local lan. now my currently need is to enable my remote office's local lan to access the dmz....

HI Guys,I have a little problem that I am failing to resolve. We a mail relay server with two interfaces connected to the same network in between to firewall. The problem I have is that emails coming from the Internet (81.165.24.244) are translated ...

Trying to set up ASA 5505 to allow IPSEC passthru for AT&T Global network Client VPN.