Network Security

I have a PIX 6.3 configured with an access-list inbound on the inside interface.I am allowing traffic from a particular host to a DMZ machine on port 80.I can see the keepalive on port 80 hitting the access-list but not where I would expect it.I have...

I have a client that no documentation of the PIX they have and the have 4 Tunnels setup. They are moving and are getting new IP's. I remember to view the isakmp keys was to do a wr net to a tftp server and it shows the passwords. I have done this b...

I have a ASA5520 that is the default route out of a network.I need it to redirect all outbound smtp traffic to another gateway off the network.I need the eqivalent of the following..access-list 103 permit tcp any any eq smtproute-map EMAIL permit 1m...

Hello,I have a server with external and internal IP address. I want to restrict the access to this server. I have 5 IP addresses that should have access to this server. Is there a way I can restrict the access from IPS or this can only be done with a...

Hi Netpros,when searching through the event log in CSA MC 5.2 we get the message that sql full text search is not installed.Did not find any info on how to do this other than under "maintenance - database maintenance - full-text search":---SQL Serve...

Can i use the same name/IP address for LAN and statefull link ?Below is the config, PIX accepts this config, just wanted to confirm if it'll wrk fine this way.failover lan interface LAN-AND-STATE Ethernet2failover link LAN-AND-STATE Ethernet2failover...

I have a request from some of our internal app developers who have WBI and MQ sessions across DMZ domains to expand the timeout values on the firewall for their apps. As far as I can tell, the timeout values are global for the entire firewall TCP/IP...

hi all,i am configuring cut-thru proxy on asa.the config guide says that the authorization acl should be a subset of the acl used for authentication.in my scenario i am using telnet to auhenticate the user and i want to authorize traffic from 2.1.1.2...

hi all,i need some help in configuring downloadable acls on asa.i have configured a downloadable acl on the asa as follows - permit tcp host 2.1.1.2 host 1.1.1.2 eq 80. i get authenticated successfully , but i get an error saying acl authorizaion den...

Does anyone know of a way that i can turn on Secure desktop for on group policy and not turn it on for another one? Meaning if i login as one group policy SD wont run, if i login as another it will download an run

Hi all, I am currently testing some ASA's in a lab but need to test HA w/ Active-standby & Active-active configs. Do I absolutely need 2 of the SAME model ASA's or can I still test HA w/ let's say 1 5510 & 1 5520?Thanks,-ZO

is the following ok? I am unsure if I can nat my 47.15 address to 3.21 with the interface alreading having a NAT that appears to be for all traffic going over the interface. Any guidence on this would be great.global (outside_datae) 1 192.168.1.25g...

We have 2 FWSM's in 2 6509 chassis and are able to upgrade the FWSM and Maintenance partition. However, we are having problems reverting our code back to 1.1.3. Any Ideas as to why?

Hi,I know the default MTU for a ethernet is 1500. But what's the default MTU size on a windows OS, xp/2000/2003 ?? and how to check this value? Thanks

Whenever I apply change in HTTP scanning (url blocking, file blocking), the CSC module will reboot by itself. Is it normal? Below is the log i see when it happens.1|Jul 20 2007 09:23:00|505013: ASA-SSM-CSC-10 Module in slot 1, application reloading "...