Network Security

I was able to get a web server that we have on our DMZ to communicate with my SQL server but I wanted to know if anyone knew why I needed to use gt 1024 in my access statement.I orginialy tried to useaccess-list DMZ extended permit tcp host 192.168.1...

Is it possible when creating an exception with the Rule Wizard to not have it create a new rule module every time a rule is created. I would like to just add rules to an Exceptions policy that is applied to the group with out it creating a new rule m...

I am trying to block AOL internet radio. with a sniffer tool, it shows that the outside ip's are still being accessed. Also, when i do a show access-list it does not show anything on the hitcounts.access listaccess-list dmz-2_in; 7 elementsaccess-l...

I have figured it out, thanks.

HiI have tried to set up access from a Web Server in a Web DMZ to a SQL Server sitting in a SQL DMZ. Initially I thought that all I need to do was setup a static from teh web server say static (inside, outside) 1.1.1.1 1.1.1.1 0 0 and the set an ACE ...

Hi,Has anyone tried configuring ASA 5505 for two ISPs for redundancy? Any issues that came up? Did the fail-over work?Thank you.Regards,Alex

I tried creating a privilege 0 account for a client for read-only access to their ASA firewalls. For the CLI login, it won't matter cause they don't know the enable password, so that keeps them from making changes. But for the ASDM login, I was ab...

Hi,Based on the attached diagram, i want to allow network monitoring server to monitor the remote branches routers, can i configure the ASA to allow traffic from monitoring server to branches routers without perform NAT ? if not, are there any way fo...

Greetings everyone! I apologize if this question is asked in lay terms, I'm just beginning my CCNA and my company would like me to set up a secure network utilizing a cisco 3845 router.Simply put, we need some form of firewall. Is this already an inc...

We have VPN between two sites. All traffic (priv. sub - priv.sub) is not natted. However, I want to be able to source nat all traffic destined for a specific server and port? Can this be done?

Hi all,I've got a problem - a LONG one... Policy (Static) NAT. Pix 515e running 7.2(1)24. Can't really get my head round the ASDM GUI, I use it but find it un-illuminating so I'll decribe this situation using CLI output. I've got a Svr (unfortunately...

Hi,I am trying to access my PIX 515e via the asdm console but keep getting 'The page cannot be found' error from Internet Explorer. When I try to access the http server I get the certificate warning first then the login dialog box. I enter the detail...

An excerpt from my ASA 5510 config:crypto ipsec transform-set myset esp-des esp-md5-hmaccrypto ipsec transform-set myset2 esp-des esp-nonecrypto ipsec security-association lifetime seconds 3600crypto dynamic-map cisco 1 set security-association lifet...

Hi,Last month when our PIX 515E was running into the memory leak problem (CSCsi53936)with PIX code 7.2(1) we were told to upgrade to the cisco interim code 7.2(2)22. So slowly we have been migrating our PIX 515E boxes to that code release in order t...

Hi, I am having problems with installing the Cisco Secure agent 5.2-203 on a RHEL 3.0 AS server. I gives me the following error [root@ABC CSCOcsa]# ./install_rpm.shRed Hat Enterprise Linux AS release 3 (Taroon Update 6)Preparing packages for instal...