Network Security

Hi What is for static (inside dmz) 192.168.100.0 192.168.100.0 netmask 255.255.255.255 0 0? Is it no nat for the 192.168.100.0 network? If I remove this line, what is happen? Could I use following lines together static (inside dmz) 192.168.100.0 192....

I cannot ping external interface of pix from inside. Access list permits this traffic. I cannot find anything in logs. What is missing?

Hello, I am stuck on an NAT for an incoming connection. On a command like static (outside, inside) interface 192.168.1.3 netmask 255.255.255.255[outside is the name of the outside interface to the DMZ, inside is the name of the inside interface, 192....

We have a PIX 6.3 that has been working with no problems, suddenly we lost the OSPF adjacentcy to our edge router.I can see the Neighbor in the edge router and the database has the routes, but they are not populating the route tables of the edge rout...

I am trying to configure a remote access vpn on a PIX ASA (8.x code). The ASA also has a site to site vpn terminating to it. I've got the remote subnet that comes in over the site to site tunnel working so that it there is no NAT when talking to the ...

Hi,I am having a problem accessing the clients network through the ASA.Here is my Senario.----R0--------------ASA----------InternetR0=fa0/0=10.1.1.2 to the ASAR0=fa0/1=10.10.10.1 to the network AASA=e0/0=10.1.1.1 to Router R0Now clients from the netw...

We have a PIX fire wall. I want to allow only the SMTP traffic and deny all other traffic from perticular host in the network. how can i do that..Thanks in advance..

Hello.I need to measure the actual throughput that goes through the FWSM module. I know it's connected with a virtual EtherChannel to the 6500, but I don't know how can I measure it.Please advise.Thanks.

Okay so here is my situation. I have 2 static public IP addresses, lets say they are 55.55.55.55 and 66.66.66.66. Each IP address is for an independent web server. Lets say SERVER_1 has local IP 11.11.11.11 and SERVER_2 has local IP 22.22.22.22. So I...

Hi guys,Just wondering if it is possible to set up a site to site with both sites on the same inside address range. For example. 192.168.16.0.so can I write an access list eg access-list 100 permit ip 192.168.16.0 255... 192.168.16.0 255..Cheers.

I suspect that the ISP managed router that is sitting in front of my PIX is somehow blocking ISAKMP (UDP 500) packets from reaching my PIX. Is there a way I can test if this is the case? Maybe something like telnetting to port 25 to see if an SMTP ho...