Network Security

I am still running VMS 2.3 and Security Monitor 2.2 to manage and monitor my IPS and firewalls. I upgraded from PIX's to ASA 5510's and noticed that I cannot see the ASA syslog events under the Event Viewer anymore. The ASA devices are still logging ...

I have configure a L2TP VPN with dynamic map. My users connect perfect, but I would like to tunneled only traffic to my network, and let web and mail traffic use their internet connection. I did use "split-tunnel-network-list" but it did not work. Me...

Hi, I have recently purchased an ASA 5505 v7.2(2), and have been unable to send SMTP through it. The effect of the problem seems similar to other postings I've read, where disabling fixup/inspect esmtp resolves the problem. I've done this, but to n...

does anyone know if its possible to have two routers at a remote branch (one primary, the other backup with HSRP) connecting back via IPsec VPN's to a Head office PIX 515E with ver6.3.5. When I lab the scenario, the pix seems to get confused in fail-...

hi all,can any one help with the diff. between these two pix commandspix(config)# clear access-listpix(config)# clear configure access-listall cisco documentations says that the second command clear the acl from the running config, so if i do copy ru...

i was wondering if i could allow my DMZ network to be accessed by my remote LAN... I currently have a IPSEC VPN tunnel on my local lan to my remote office's local lan. now my currently need is to enable my remote office's local lan to access the dmz....

HI Guys,I have a little problem that I am failing to resolve. We a mail relay server with two interfaces connected to the same network in between to firewall. The problem I have is that emails coming from the Internet (81.165.24.244) are translated ...

Trying to set up ASA 5505 to allow IPSEC passthru for AT&T Global network Client VPN.

Hi All,I am a bit confused, we are looking into troubleshooting some issues with MSS and I came across 2 parameters which I am not sure if they both serve the same purpose....1) sysopt connection tcpmss 1380According to cisco description, this sets t...

Thanks in advance!We're setting up a web server farm consisting of web, SQL, FTP, and domain controller servers. The data centre provided us 2 10Mbps Ethernet connections with 3 public static IPs each on primary subnet, and additional 14 public stat...

Hi guys Please is there any link on CCO that clearly states the conversion between PIX and ASA of clearly shows how the commands changed.Any other gotchas on the conversion.your Inputs will be appreciated.RegardsHash

Hope some one can point me to the right direction. Just procure a Metro-E Direct Internet Access (10MB), the provider actually is running ethernet over SONET. Anyway, they hand over a cat 5 into a router (Cisco2620), it's fastethernet port to my swit...

We have a client that has an ASA5505 in transparent mode. The ASA is working ok and the user can access the ASA via ASDM, telnet and ssh from the inside, but we are not able to access the ASA from the outside via SSH or ASDM. The commands http 0.0....

access-list outgoing extended permit tcp any host x.x.x.x eq wwwaccess-group external in interface outsideaccess-group outside_access_out out interface outsideaccess-group outgoing in interface insidei want to know what is benefit of access-group out...

i ask if i need to write at the end of ACl this commandaccess-list outgoing extended deny ip any any