Network Security

I have a Cisco 2821 router that sits behind a PIX firewall. When this router is using a PAT IP it can ping and telnet outside public IPs thru the firewall with no problem. Recently I added a static NAT entry so I can telnet to this router from the ...

Hi,I have 2 active directory forests that reside on either side of my PIX. Forest A is on Inside interfaceForest B is on a DMZ interface security level 50The Microsoft guys would like to setup a trust between the 2 forests.In order to do this, RPC t...

What is the best way to add an ACL to a firewall for the network object to a specific host. I'm trying to add it so the permit acl is appended to a group of rules in the config. How do i ensure that after i add it to the config it goes under a specif...

Hi,The following error message is getting continuosly logged on to the console of 4215 IDS. " end_request: I/O error, dev 03:41 (hdb), sector 306848 " How to stop this error logging on the console and is it due to Harddrive error? Not able to telnet...

If i only need a firewall, what is the best option? PIX or ASA? Performance, features,...

I have an ASA-5510 with the SSM-CSC module installed. I am trying to build a policy-map to identify traffic to divert to the CSC module for scanning, but the class-map command isn't supported. I can build the ACL and the policy-map but the class-m...

HiIs it possible to allow specific users access to certain subnets or would i just have to create a vpn group for each user?RegardsKevin Hobson

HiI have a problem with DNS resolution with the ASA 5510. The DNS server is inside the LAN (x.y.11.0/24) and MPLS clients are coming from a DMZ segment. There is an MPLS Router between MPLS cloud and ASA, the DMZ is x.y.0.0/24 and DNS server is sta...

I was following the procedure for recovering password in pix 506e but something not working when I assign for example192.168.1.1 for pix and192.168.1.2 for pcand connecting them with a cross cable no one of both interfaces can ping to my pcand my pc ...

Can a static nat take a form like this static (in,out) 211.1.1.1 211.1.1.1 netmask 255.255.255.255

Hi all,I have configured an 1841 for Easy VPN and currently using local user list on router for access. Have not really been able to find any information on configuring Microsoft IAS to be able to authenticate users based on the Active Directory Remo...

I know I am missing something here I just can't figure it out.. Something doesn't feel right about this config and I am having issues getting from one inside to dmz and inside to outside randomly. Any tips or suggestions on this config?Inside should ...

Hello,I have a customer with the unrestricted version of LMS 2.6. They are currently under a valid support contract. It appears that LMS 3.0 licensing has changed and there are no longer any unrestricted versions available. I believe the highest numb...

Hello all,I am tring to configure single sign-on between NAC 4.1.1 and a WLC using ACS. Users are authenticating correctly when manually entered. We have configured the accounting packets to be passed between the CAS and ACS, as well as between WLC...