Network Security

I have a pix 501 and am needing to do some port forwarding. I have a DVR (being used for security cameras) it has an internal ip of 192.168.1.150. I need to have port forwarding setup for 3000 - 3007 and 8800. I used the following to do this:stati...

Hi,If i connect 2 ASA 5510 with cross cable & configure failover on the active one, whether failove rtake place??PLease advice.

I just installed an AIP-SSM module in our ASA 5520 firewall (protecting a school district). I successfully configured it to scan all traffic sent both directions with the following config:access-list IPS extended permit ip any any class-map ips-clas...

My problem is that with my new 5505 the outside world does not have access to my web and mail services. when I show access-list, the hit count does not go up when I know there are web and mail requests coming in.

Hi.I have 2 ASAs in failover and the provider that is providing the internet link and the link to our main office has done the following.Over the same optical cable I have 3 IP ranges coming.First is a point-to-point range for connecting our devices,...

Hi,I have a Pix 515 which is runnig slow, it has high cpu utilisation, im not sure if this is due to the number of connections it currently has, which to me dont seem to be being cleared down. Please could someone offer some advice, thanksI have atta...

I have a 525 bundle but one of the firewalls will not boot up anymore. It gets to a certain point and then just hangs. These two firewalls were just recovered from a client site so I'm guessing at this point what may have happened. Is there a typi...

Hi, I would appreciate assistance in troubleshooting the is PIX 501. The PIX 501 sits behind a Netopia DSL modem servicing a branch office. The following is the config. Thanks.SaidPIX Version 6.3(4)interface ethernet0 autointerface ethernet1 100fu...

Hi,I have a Cisco PIX 515E router with an unrestricted license. My internal users can access the internet via the leased line router connected to the outside interface. The DMZ users currently get out to the internet the same way. However, I have bee...

I'm running my IDSM in promiscuous mode and creating event action filters to filter benign events. I'm seeing quite a few events (several different signatures) with target ip addr of 0.0.0.0. An example is:signature: description=TCP Drop - RST or S...

I have been trying to fix a really annoying ssh timeout setting of 1 minute but haven't had any luck. Here are the relevant commands:mgmt-firewall# sh run sshssh infra-mgmt_subnet 255.255.252.0 infra-mgmtssh timeout 60ssh version 2mgmt-firewall# sh ...

Hi,I am trying to develop a script which will list events based on certain conditions. For this i need to know about all the attributes in the logs.Below is a sample log,05-12-2007 23:57:28 192.x.x.x local7.warn 2069294: 2080360: May 12 2007 23:5...