Network Security

is the following ok? I am unsure if I can nat my 47.15 address to 3.21 with the interface alreading having a NAT that appears to be for all traffic going over the interface. Any guidence on this would be great.global (outside_datae) 1 192.168.1.25g...

We have 2 FWSM's in 2 6509 chassis and are able to upgrade the FWSM and Maintenance partition. However, we are having problems reverting our code back to 1.1.3. Any Ideas as to why?

Hi,I know the default MTU for a ethernet is 1500. But what's the default MTU size on a windows OS, xp/2000/2003 ?? and how to check this value? Thanks

Whenever I apply change in HTTP scanning (url blocking, file blocking), the CSC module will reboot by itself. Is it normal? Below is the log i see when it happens.1|Jul 20 2007 09:23:00|505013: ASA-SSM-CSC-10 Module in slot 1, application reloading "...

Does anyone know how to change the location of logging files of CSA and/or disabling local logging.

Hi,I was wondering if there is anything I need to do to a router which is infront of my PIX515E.The setup I have is a PIX515E with a 3660 Router infront of this before the internet. On this router is the public IP addresses which are then nat'ed to i...

How to check the packet drops on pix?

Hi,I am very new to PIX and need some help with setting up rules for a new network.I have three interfaces (inside 100 - 172.16.10.0, outside 0 - 192.168.10.0 and Demo 10 - 172.16.11.0). On the Demo network I have three devices with ip addresses as 1...

There seems to be some ambiguity on PIX upgrade requirements, i.e The 7.2(2) Release notes stateVersion 7.2(2) requires the following: 1. The minimum software version required before performing an upgrade to PIX Version 7.1 is PIX Version 7.0. If you...

Hello,i have installed an CSM 3.1 (build 482)on a Windows 2003 Server.When I read out the Configuration from my ASA5520 (7.2.(19)it still works fine, but the Configuration from my VPN-Tunnels to my Locations will not be read out.Any Idea for my Probl...

Is there a signature available for the new Bind 9 DNS Cache Poisoning vulnerability/exploit.See referencehttp://www.securityfocus.com/bid/25037/info

I can't seem to find a good answer to this... I need to have certain hosts be able to run blocked applications on other hosts. Can I set exceptions by username and/or IP address?

I'm trying to block MSN and Yahoo! messenger file transfers, while still allowing chat and other services. The problem I get is when I try to apply the inspect rules in my policy I get an error that I can't have multiple inspect rules Error:=========...

Is there any way to allow broadcast traffic through a PIX in transparent mode? No matter what ACLs I build, it gets blocked. Even if I build an ACL which denies it explicitly, it doesn't get logged under that ACL.Thanks!