Network Security

HiIs upgrade from 6.3.4 to 7.2.2 allowed and work well or i should upgrade like this: 6.3.4->7.0.x->7.1.x->7.2.x ?in release notes for 7.2 i found:The minimum software version required before performing an upgrade to PIX Version 7.1 isPIX Version 7.0...

Two Pix, running 7.0.Primary is running UR active/active license, Secondary is running FO active/standby only license. Both of box cann't talk to each other. and keep complain" remote unit license is different".Is this caused by the active/standby on...

Hello,Can somebody explain the difference between the commands:static (inside,dms) 10.1.0.0 10.1.0.0 netmask 255.255.0.0and nat (inside) 0 access-list NoNataccess-list NoNat permit ip 10.1.0.0 255.255.0.0 anyAfter Updating from 7.x to 8.x the second ...

I can't figure out why outbound ftp is not working. Could anyone help?same-security-traffic permit inter-interfacesame-security-traffic permit intra-interfaceobject-group service ExchangeOWA tcp description Exchange Web and Mobile Access port-object ...

We have a server hosting Syslog service for an application on default port 514. Can we bring a Syslog service on the same server for FWSM and if so what are the conf changes required?

i am using FWSM in single mode.But the main issue is my vlan interfaces showing down.Please let me know how to up the vlan interfaces.shivlu

Hi,I am wondering whether ISR or any other routers with IP base IOS (i.e. not with Security Bundles), support CBAC ACL or stateful Firewalling? Or is it a must to go for the Security bundles in order to implement stateful firewalling in my router?Reg...

Hi,After upgrading a 515e PIX to 128Mb it will now not boot!On powering up I get the following console output and then it just stops and appears to hang:CISCO SYSTEMS PIX FIREWALLEmbedded BIOS Version 4.3.207 01/02/02 16:12:22.73Compiled by morlee128...

Hi,today I configered a router (1760) for snmp v3:snmp-server view ReadView internet includedsnmp-server group OurGroup v3 auth read ReadView snmp-server user xxxx OurGroup v3 auth md5 yyyyTrying out with net-snmp works fine:snmpwalk -v3 -u xxxx -l a...

Hi, I have a router connected to an mpls network and would like to setup an ASA 5505 as a backup using a Site-to-Site VPN. Their LAN interfaces would be on the same subnet. Is is possible to enable something like HSRP between a router and a firewal...

Hello,I'm having strange behaviour of my IOS zone-based firewall related to self security zone. As I understand, all traffic from and to self zone is permited, unless any rule between self and other zones exists.I havo no rule between self zone and i...

Hi,I've got an ASA running a single context on 7.2(2) connecting via a web based VPN to a VPN3020 concentrator. Whilst the tunnel is up and reporting no errors, we are losing maybe 1 in 10 packets. The pattern isn't regular, with sometimes over a min...

Hi, I have a problem with my ASA5510 : to access to Internet, the users have to enter a login and a password, which are in the firewall (command : user xxx pass xxx pri 0). For the VPN users, I add some attributes (vpn-group-policy...). With the...

Hello, i want to know how to configure a firewall to allow dhcp relay request from my WAN network to a Internal DMZ ? TCP/UDP ports ??My other question is for DHCP relay request the dhcp router asks ip addresses with his own ip address, what the beha...