Network Security

We are planning to deploy ASA 5510 with AIP-SSM in Transparent mode between VPN device and our internal firewall.The Outside interface of ASA would be directly connected to Inside interface of VPN device.The Inside interface of ASA would not be direc...

Can you tell me what are the vulnerabilities for using the out of the box default settings on my (6.3) Pix (515) attached to the Internet. This is the way I am presently running.

Hi,New to the VPN side of things. I have a PIX 515E which, going outwards, connect to a C3660 unit then to the internet. I want to connect remote clients through VPN to the inside network. Now I understand I have to give the PIX a internet IP. So my ...

I want to be able to ping to the internet or do a tracert. I also don't want to be seen on the outside interface.how do I do this?

When a remote vpn client connects he can ssh to dmz network but cannot able to do ssh on the internal network.There are 2 types of VPN are installed. First is Site-site and the second is remote vpnclient. please help me out.

HiI have just been asked to install a ASA 5510 into our network. I have never used an ASA device so i am looking for the best way to connect it into the network. It will be connected to a 3560 switch. which is part of a vtp domain with 15 vlans. Can ...

I have only 1 outside address, and I PAT to several inside addresses. But only one protocol works inside. I can connect to port 80 but not 25.ip nat inside source static tcp X.X.X.C 25 interface FastEthernet4 25ip nat inside source static tcp X.X.X...

I need some help. I am trying to setup out new ASA 5510, and I am stuck. Everything looks to work with my internal and DMZ interface, but I am having a problem with trying to contect out to one of our clients sites via VPN. We use Cisco VPN to con...

Hi,Just a couple of simple and quick questions for you. I have in my test use a PIX 515 and I noticed its out of date model that didnt even have info on it on Ciscos site (that i could find).Is the only major difference between these 2 devices that P...

Hello, I have CBAC configured on an ISR and was wondering if temporary openings in ACLs will always show up when comitting the "show ip access-list" command. My assumption is that CBAC is not really opening temporary ports on acls at all if it d...

Hi there,We have recently implemented a VOIP system here and are currently having problems with remote users. Basically, they cannot have a conversation unless they keep trying and then it will work maybe on the third or fourth time.I have checked th...

Hello, I have a general question regarding firewalls, but specifically as it pertains to the CBAC firewall feature set on, say, a 2811. Assuming that I have an ISR with a serial interface on the WAN side and an Ethernet as the LAN side, an ACL s...

Trying to connect a remote client using SSL VPN through web interface. When attempting to ping LAN side (192.168.1.2) through inside interface I am getting this in the log -Deny icmp src inside:192.168.1.2 dst outside 192.168.50.1 (type 0,code 0) by ...

Hi Guys,I did some research how Cisco IPS HA works, but no lucky to find out based on followed statement, anybody can explain how to achieve this ?"Resiliency and redundancy can be delivered through unique network collaboration; for example, Hot Stan...