Network Security

My customer has an ASA running 7.2.2, a Cisco 2950 switch and a Cisco 2621XM, the router is located at the outside interface of the ASA, which IP subnet is 172.16.1.0/24. End users and a FTP client are behind the ASA, that means all the clients are l...

I am subscribing to a spam filter service that requires inbound access through my PIX. I need to allow 5 different IP addresses for smtp traffic. Will this configuration work?access-list outside_access_in permit tcp 12.158.34.0 255.255.255.0 host 6...

Hello everybody,i'm new into the whole PIX thing, so i'm sorry if my question seems to be "easy". :-)I was looking at the config of a PIX where i need to do a upgrade of the IOS and the ASDM via CLI. If i compare it to a router, where i know what i'm...

Hi All,I have three pix's connected to three external Wan Links.I am wanting to share each pix default route to one another so I have ISP resiliency. It is mainly for load sharing, so I can maximise on bandwdith not being used, on low user sites.They...

Can I have on PC on the inside of my firewall say 192.168.2.2 go out through my firewall on ports 6000 and 6010, but show up on the other side as two IP's depending on which port it is talking to.So,192.168.2.2 port 6000 would translate to 192.168.8....

hi all,I have a document in that it got details like these.pix535 model:rated output:1gbps+upto 95 mbps 3des vpn,2000 ipsec tunnels,concurrent connections: 500000i would like to know the exact meaning of this representation.thanking you,prashanth.

Hello,I have established a site to site VPN between two Cisco 2811 routers. I need to work with MS Remote Desktop with some PCs. Although I can open a Remote Desktop connection from outside the VPN (using NAT), it is impossible to do so through the V...

Hi,I normally use the configuration below to block the ftp/get command on my ASA v7.1. But, after upgrade to v7.2, the 'ftp-map' command has been deprecated. We need to use Use 'policy-map type inspect ftp' instead. I found the only actions to ftp co...

If you issue the "sh crypto isakmp sa" command, what determines whether the tunnel shows up in the list?For example:When I issue this command, I see some as QM_IDLE and MM_NO_STATE,But I have one tunnel that just gets dropped from the list.Does this ...

Netconfig configured with a Task to deploy Access-list config out to Routers and Switches to 190 devices returns a fail to 35 of the 190 devices. The Failure message is detailed below. Applying the config manually to the device works.Failure message ...

Hi all,i have a problem to initially discover my inventory. I always get a error message "device unreachable" within device inventory. When i select is says "can`t resolve name. How can is fix this problem. Which are the solaris files for DNS resolut...

HiWhen I enable same-security-traffic permit intra-interface in pix then under two answer is correct ??[same-security-traffic permit intra-interface"configuration command was issued. What are two purposes of this command?a.It allows all of the VPN sp...