Network Security

access-list outgoing extended permit tcp any host x.x.x.x eq wwwaccess-group external in interface outsideaccess-group outside_access_out out interface outsideaccess-group outgoing in interface insidei want to know what is benefit of access-group out...

i ask if i need to write at the end of ACl this commandaccess-list outgoing extended deny ip any any

We have a very simple setup. Have a single T1 line coming into our office and would like to connect to the internet through our 506e. We had it working just fine at our old office through a DSL line.I though it would be a simple matter of changing th...

I created a subinterface on a PIX-515E (7.2.2) but I cannot arping it unless I set the switch port to "switchport mode trunk".But then the main interface on the PIX stops working, failover claims the status of the main interface is "unknown" and the ...

Hello All, I am seeing a unique problem whenever I create Network Object group in PIX firewall an other Network Object group with same name_ref is also created on the firewall.For example, I created a group called webserver group an new group called ...

I have 2 ASA . One is primary and the other one as secondary So if 1- I upgrade the primary ASDM version it will effect in the running configuration to be deleted or down2- If I upgrade it will effect on the secondary or I must upgrade the primary an...

I am attempting to redirect port 3390 to an internal ip while remapping it to port 3389. I have tried using a different source and destination port but it does not seem to work. Can anyone tell me how to redirect to a different internal port?

I want to make an EzVPN site-to-site tunnel with CSM. The client side has a private ip address on the WAN interface. My problem is that I can not access the private ip address via the internet. However when I want to set up an EzVPN connection with C...

I've a PIX-515E running 7.2.2 and I'm trying to create a secondary IP address on the outside interface. It's like having eth0 and eth0:0 on Linux.If I run "ip address ..." in config-if mode, it just replaces the existing address.I'm not sure what els...

I have 2 PIX515e's with a crossover cable on e5. I get the following error when I start the secondary unit. pix(config-if)# Mate's license (VPN-3DES-AES Enabled) is not compatible with mylicense (VPN-3DES-AES Disabled). Failover will be disabled. Any...

Hi I have:- CiscoWorks LMS2.5- Cat4006 ver.12.1(11b)EW1 WS-C4006 When i add device to cs lms then cat4006 is restarting forever. Does anybody know why?

HelloMy ASA 5510 wont boot up. It was working fine before I rackmounted it. Now I'm just getting the following messages repeatedly. I've tried contacting Cisco but they wont talk to us because we didn't purchase support with the device (despite the d...

Dear All;It is very easy topic;i have router 2800 series directly connected to internet and PIX 525 is behind this router. the e1 of PIX is connected to my internal router 2800. i configured these devices in such a way that my intranet work is totall...

I am having some Strange issues regarding throughput between several trunked vlans when passing the ASA.Constellation:2960-2 (vlan 1-5) <-- trunk --> 2960-1 (vlan 1-5) <-- trunk --> ASA 5520 (Ge0/1.1-5)As soon as flows traverse the ASA i have issues ...