Network Security

On 4/30/07 the two Pix 525 were working just fine. I have PPTP and IPSec VPN access configured. Today I find that the outside interface on both are up but that I cannot ping to the PBR connected to the outside interface. the only change made today wa...

Hi After get following error in the BEA Welogic app server in the dmz: "<BEA-101215> <Malformed Request "/jsp/AD_Banner/Hardocp_120x300.jsp HTTP/1.0". Request parsing failed, Code: -10>". app server is still running fine, but traffic in the PIX (vers...

I have a pix 515e running 7.1(2)7.I had been getting connection time out after 5 hours but don't know where the 5 hours come from as the default setting is 3 hours and had not been changed.** Default timeout on Pix firewall.PIX# sh run timeout timeou...

I was wondering if someone could help me out. My company currently uses an ISA server as the firewall. Management wants a Cisco ASA put in it's place. They want to completely get rid of the ISA server. I suggested keeping the ISA to control internet ...

for some reasons that i can't figure out, a PIX 515E is unable to translate internal IP addresses. I get the following errors:Apr 25 2007 18:38:54: %PIX-3-305006: portmap translation creation failed for tcp src inside:10.1.1.112/2865 dst outside:198....

I had to customize all the agent kits due to application requirements. However, I notice the deleted agent kit are still being compiled during a rule generation. Is there any way to purge them ?

Currently I only need a password to connect to my routers and firewalls. I want to have better security by requiring a username as well. Would that be the "username" command? AND once that is setup, will it always require a username from then on beca...

If I need to give access to a class b network in an acl/static statement would the following statement work...access-list acl_out permit tcp host xxx.xxx.0.0 host my.outside.ip eq sshstatic (inside,outside) tcp my.outside.ip ssh my.inside.ip ssh netm...

Is is possible for a remote access vpn client to connect to a server on the inside or dmz with it's outside address? ASA 7.2.1

hi, i had successfully installed the Cisco ISC 4.2 on my SunFire V125 Server which is running on Solaris 10 and i was also successful to login to the ISC for the first time using the Solaris Java browser. however, after i reboot the machine i could n...

Hello all,We have new ASA 5520's and I need to deny traffic from inside to specific outside IPs. How can I accomplish this without denying traffic to all other outside IPs? As soon as I add the rule to the inside interface, it removes the Permit to "...

Hi all -Had an interesting problem today, and I was wondering if someone might be able to explain to me what could have been happening. I had this user that couldn't connect to the internet. After some snooping around, I noticed that the firewall was...

I would like to restrict user access to the internet via username and password on a Cisco 851 router. In other words I would like the user to be prompted with a user name and password in order to access the internet. Is this possible via AAA or ACL? ...