Network Security

I am trying to block AOL internet radio. with a sniffer tool, it shows that the outside ip's are still being accessed. Also, when i do a show access-list it does not show anything on the hitcounts.access listaccess-list dmz-2_in; 7 elementsaccess-l...

I have figured it out, thanks.

HiI have tried to set up access from a Web Server in a Web DMZ to a SQL Server sitting in a SQL DMZ. Initially I thought that all I need to do was setup a static from teh web server say static (inside, outside) 1.1.1.1 1.1.1.1 0 0 and the set an ACE ...

Hi,Has anyone tried configuring ASA 5505 for two ISPs for redundancy? Any issues that came up? Did the fail-over work?Thank you.Regards,Alex

I tried creating a privilege 0 account for a client for read-only access to their ASA firewalls. For the CLI login, it won't matter cause they don't know the enable password, so that keeps them from making changes. But for the ASDM login, I was ab...

Hi,Based on the attached diagram, i want to allow network monitoring server to monitor the remote branches routers, can i configure the ASA to allow traffic from monitoring server to branches routers without perform NAT ? if not, are there any way fo...

Greetings everyone! I apologize if this question is asked in lay terms, I'm just beginning my CCNA and my company would like me to set up a secure network utilizing a cisco 3845 router.Simply put, we need some form of firewall. Is this already an inc...

We have VPN between two sites. All traffic (priv. sub - priv.sub) is not natted. However, I want to be able to source nat all traffic destined for a specific server and port? Can this be done?

Hi all,I've got a problem - a LONG one... Policy (Static) NAT. Pix 515e running 7.2(1)24. Can't really get my head round the ASDM GUI, I use it but find it un-illuminating so I'll decribe this situation using CLI output. I've got a Svr (unfortunately...

Hi,I am trying to access my PIX 515e via the asdm console but keep getting 'The page cannot be found' error from Internet Explorer. When I try to access the http server I get the certificate warning first then the login dialog box. I enter the detail...

An excerpt from my ASA 5510 config:crypto ipsec transform-set myset esp-des esp-md5-hmaccrypto ipsec transform-set myset2 esp-des esp-nonecrypto ipsec security-association lifetime seconds 3600crypto dynamic-map cisco 1 set security-association lifet...

Hi,Last month when our PIX 515E was running into the memory leak problem (CSCsi53936)with PIX code 7.2(1) we were told to upgrade to the cisco interim code 7.2(2)22. So slowly we have been migrating our PIX 515E boxes to that code release in order t...

Hi, I am having problems with installing the Cisco Secure agent 5.2-203 on a RHEL 3.0 AS server. I gives me the following error [root@ABC CSCOcsa]# ./install_rpm.shRed Hat Enterprise Linux AS release 3 (Taroon Update 6)Preparing packages for instal...

Hi,I have two Pix firewalls in HA mode (Active/Standby). I can connect to the active firewall (F1) but not to the standby firewall (F2). I can ping the firewall F2 and the shaow fail advised that it is there and in standby mode. If i swop the firewal...

Hi,our users need to access internet via Ipsec VPN is that possible?we are using IPsec VPN Clients terminated in Cisco Routers.and for more clarification the VPN router is connected to the internet through a diffrent SP, if that possible how could be...