Network Security

a few questions:1. Since the firewall is stateful, does this mean the if a connection is made from a higher security interface to a lower security interface (inside to DMZ), once the connection has been established, that the lower security interface ...

Hi,I'm trying to get a few of our machines on dmz to communicate with a TSM server which is located on a subnet on the inside. But I can't get it to route traffic out on the subinterface I have created in the pix, it keeps using the dmz as output int...

Hello All,I am running an ASA w/AIP. What I would like to do is block all url request for .php except for 1 url. The engine being used for the custom signature is service-http.I have tried ([^(allow.site)][A-Za-z][0-9])*\x2E([Pp\x50\x70][Hh\x48\x68...

We're running 7.2(2) on a PIX 525. We can't seem to access one website. No deny messages show up in the syslog, just a TCP reset message.2007-05-16 13:40:05 Local4.Info inet-pix May 16 2007 13:40:05: %PIX-6-302014: Teardown TCP connection 673938 fo...

We have enabled an IOS based IPS on our internet routers and all seems to be working well apart from a strage issue. We are currently only alerting on all signitures so no traffic should be droppped. The problem i have is with incoming hotmail and ...

Hi all,I?m willing to implement the NAC in L2 GW mode; so far I did a good job and the Windows update working fine but here I had Kaspersky AV and once I enabled the role-requirement for the AV definition I got an error said **KasperskyAV is not inst...

Dear all,I installs 2 fiber cards on PIX 525 ( FO-Active, 10 interfaces) license; only one of them goes up; how number of fiber interfaces can install on PIX525?Regards,Na?am

I have a PIX 515 with 3 FE's (DMZ included). I have a switch behind the DMZ interface where the servers are connected to.What I would like to do is to have 2 VLANs (1 for MGMT and 1 for Data), so I can manage the switch in a separate VLAN.Question is...

I have a 515E with 32mb,R lic, 6.3os and would like to upgrade to 7.0. Is there any benefit in going to 128mb instead of the 64mb recommended?

Hi Netpros,I need to upgrade a VPN concentrator with 128 MB of memory to the latest version which I believe is vpn3000-4.1.7.Q-k9.bin however in the software download files section I can also see another release with 4.7.2 i.e vpn3000-4.7.2.K-k9...

Can anybody tell me please if the Cisco VPN client, works on Win2K3..?

RME v3.5I am trying to import via CSV.The devices can be reached via telnet, but not via SNMP thanks to ACL's on all remote devices.I was under the impression that to use NetConfig, I just need Telnet Username/Pass, but the devices will not import as...

I've just upgraded a PIX535 from 6.3 to 7.01 - everything went fine but now I have the following lines in my config:crypto ca trustpoint temp_migration_tp crl configurecrypto ca certificate chain temp_migration_tp certificate ca 410fa3f68158598e4c432...

Hi,We have migrate on asa 5520 and i have connections problems with the message:%ASA-3-201011: Connection limit exceeded 100/100 for outbound packet from 10.9.1.1/55194 to 10.1.6.1/22 on interface insideI Change the static lines to 1000 max tcp conne...