Network Security

ipsec vpn Client disconnects every time when "peer response timeout" expires. Config attached. Ran ethereal and show no keepalives coming from PIX.

I have IDSM modules in 6513 switches. Is there any way to synchronize the configuration of the IDSM in the primary switch to the IDSM in the secondary switch? In the configuration guide I found a reference to "merging" a backup configuration to a cur...

Hi guys - duh question.Trying to block in and out traffic from a domain (super-servers.net, actually.) Want to do it by domain as opposed to IP, under the assumption that these boneheads will shift IP addys frequently.Went into the ASDM, went to add ...

When i type the command: sh access-l acl_name, i see that some access list lines with different content represent with identical line number. If i try to erase these lines, pix reflect with mess: "Specified access-list does not exist at that line". W...

Hi,I have enabled syslog setting on my ASA 7.2 logging enablelogging trap alertslogging host inside x.x.x.x tcp/1468logging facility 20Whenever i enter logging facility 20 my syslog server starts receiving logs but stops after 15-20 min.Also logging ...

Is there a way to control the CSA UI while using RDP? Currently I can only access the CSA UI when accessing a server from a KVM.The CSA UI does not appear through RDP.

Morning All I was wondering if somebody could help me with the split-tunnel command. I am trying to allow my VPN users internet access from their own PC's while connected to VPN. I have added the split-tunnel command in the VPN config but not sure wh...

Quick Question... Once I allow PPTP through a PIX, do I also have to allow the Remote Desktop ports to be open? Or does RD go through the PPTP ports?Thanks

Hi,We have installed an IPS 4215 with VMS 2.3.Since upgrading to ver 6 of IPS I lost some functionality of the Management Console. Could not re-import the IPS sensor.I have since found out that ver 6 is no longer supported with MC and we need to upgr...

I am installing a new PIX506E and want to have it wide open in the beginning and then will run a qualsys network test and shut things down from that point. My problem is this: I believe it is wide open, but when I attach it to the network external pe...

Hi,I have a PIX 515 with two interfaces, inside (10.0.0.1) and outside (200.200.201.2).The web server ip is 10.0.0.237. I have a static translation to 200.200.201.237.My access list is wide open...permit tcp any anypermit udp any anypermit icmp any ...

Hi, has anyone ever configured a pix to site between a local LAN switch and an internet broadband router to basically block all trafic except for outgoing vpn connections using cisco vpn client to a cisco vpn concentrator from pc's located on the loc...

Is it possible to pass vlan tags through either a PIX 535 or a CISCO 6503?Scenario:I have several switches in line with each other, all layer 2, connected to one router. Router ----> Switch ----> SwitchI'm running a handful of different vlans from th...

Okay so I've looked over the config many times and I can't figure out what the problem is. I have 2 servers running behind the PIX (s1 - out 78.xxx.xxx.15 in 10.xxx.xxx.83 s2 - out 78.xxx.xxx.14 in 10.xxx.xxx.85). From server 1 I can VPN/RDP in, b...