Network Security

Hello:I wish to build 2 GRE/IPsec tunnels from a 2811 (IOS 12.4(3g)) running to 2 differing PIXes which are located in the same place (1 is a 505 running 6.3(4) and the other a 515e running 7.2(1)).One tunnel will be used as primary and run over a Se...

Hi We have PIX version 7.0. Netscaler in the dmz, and virtual server ip is the 192.168.8.98 (dmz network 192.168.8.0). inside web server is 192.168.0.250 setup with virtual server. If I setup a static (dmz,outside) 12.x.x.x 192.168.8.98 netmask 255....

Hi,I have a big network comprising of 10.0.0.0my inside interface ip is 10.100.1.1 /24my management interface ip is 10.150.1.1 /24The default inside route in my ASA is route INSIDE 10.0.0.0 255.0.0.0 10.100.1.1From my user network - 10.200.1.X, i try...

Hello,I'm trying to redirect outside port connections destined for a specific "sftp" server by accepting port 22 connections destined for the sftp server and redirecting to port 2222 on the sftp server through the PIX.static (inside,outside) tcp inte...

Is there a particular software revision I will need on my Cisco 3620's and 3640's in order to get them to function with the IDS 4210? Or does the IDS do all that for me? I haven't tarted the IDS up yet so I am new to this.

I have some servers on our inside network that have a secondary NIC for replication and failover purposes.This secondary NIC on the inside servers is in it's own seperate VLAN (10.10.10.x).We need to add this set up to a couple of DMZ servers.I want ...

Hello,A few of my customers are utilizing ASA-SSM-10 module running under ASA5510/20 hardware. The FW?s is part of the Failover configuration.The module is running in "promiscuous fail-open" mode and the class-map for the IPS is applied as global_po...

I can't get into our firewall with the password provided. I need to recover the password. What are the procedures?We have a PIX 515 failover

Hi - I have a number of IDSM-2 cards I've recently upgraded from 4.x code to 5.1.1 IPS code. Since the upgrade, I am having frequent issues with the sensing interfaces (gigabitEthernet0/7 and 0/8) going errorDisabled. Of course I am not able to do ...

Hi Pix 6.3, enable snmp-server host to a windows 2003 server running MRTG. When MRTG try to get traffic from PIX inside interface, nothing show up. No errors in pix and windows, ping is fine. Could help to list some documents about PIX 6.3 snmp setu...

I have PIX 515E Firewall when I statrt it the following message appear in Hyper Terminal.CISCO SYSTEMS PIX FIREWALLEmbedded BIOS Version 4.3.207 01/02/02 16:12:22.73Compiled by morlee64 MB RAMPCI Device Table.Bus Dev Func VendID DevID Class ...

Hi What is for static (inside dmz) 192.168.100.0 192.168.100.0 netmask 255.255.255.255 0 0? Is it no nat for the 192.168.100.0 network? If I remove this line, what is happen? Could I use following lines together static (inside dmz) 192.168.100.0...

I cannot ping external interface of pix from inside. Access list permits this traffic. I cannot find anything in logs. What is missing?

Hello, I am stuck on an NAT for an incoming connection. On a command like static (outside, inside) interface 192.168.1.3 netmask 255.255.255.255[outside is the name of the outside interface to the DMZ, inside is the name of the inside interface, 192...