Network Security

I don't know the maximum of translation slots available when PAT is used1) PAT uses the high ports for translations; therefore the available translation slots per IP are calculated via 65536-1024 = 64512.2) Almost unlimited as a hash value is used to...

I have two interfaces that I am trying to communicate. VPNaccess is security level 100 and DMZ-50 is a SL50. Default rules. Below are the NATs currently in place. When I try to ping 172.16.50.21 I get the following 305005 No translation group for icm...

can i separate the voice and data over an ipsec vpn .. so that voice only uses AH while data uses esp.

HI,I have a few public facing interfaces on an ASA and have found that when a connection comes in through an interface that isn't the default route for the ASA, I get an error stating that no route to x.x.x.x from x.x.x.x (interface).When I add in a ...

Am attempting to have a user build a VPN related session, from a node on the inside of my FW, to a VPN host at AT&T. I see the following session build on the FW:<166>Aug 23 2007 08:38:13: %PIX-6-302015: Built outbound UDP connection 140948597 for out...

Hello,I have never upgraded an OS on a PIX firewall but now I have to take OS 6.2.2 and put it to OS 6.3.5.I have downloaded the pix635.bin file to my desktop and installed PumpKIN (TFTP server program).Can someone please provide me with instructions...

What would be the advantages/disadvantages to having your internal Mailserver on the DMZ interface of an ASA5510? Thanks

I have a client that is insisting on using a single device (2811) to connect to the Internet as well as their local Lan. I would like to use the firewall feature set to minimize the internal network risks having the Internet terminated on the same de...

I found this paragraph on the FWSM configuration guide 3.2:NAT Bypass No Longer Creates NAT Sessions In previous releases, even if you used NAT exemption or identity NAT, the FWSM created NAT sessions (xlates) for all flows. In Release 3.2, you can c...

Hello all,I've just started configuring 2x new ASA5520's. They will be either in active/active, or active/passive failover. I'd like to have stateful failover.A couple of questions:What is the "management" interface for (other than the potential obvi...

I have been using NetFlow to monitor incoming and outgoing traffic on my Cisco 1841 router. The 1841 router is just an edge router but my ASA 5510 is my firewall and where my remote site's VPN connection start and end. I've been seeing some high traf...

I may be missing something obvious, but would appreciate some help.I'm attempting to establish new connectivity to an inside server from an outside vendor. The traffic is being denied with no connection as soon as the conversation is initiated. I can...

HI,Does anyone know whats going on here? One of the clients on the network launches a cisco vpn client to an external resource and the client connects and is authenticated but no traffic passes. PAT is in use on the outside interface.I have enabled n...