Network Security

Hi all.I'm now managing two ASA's (5520 and 5510). These have been in my mind configured poorly.The 5510 has its external interface connected to a DMZ interface of the 5520.SSL and IPSec vpns are terminated to the external interface of the 5510.Can ...

I have this scenario with a PIX 525 6.3, this has worked for months and suddenly stopped.I have a device on the inside network that needs to access a remote site network through a VPN tunnel. Inside network device is 10.11.150.1, needs to access remo...

Hi,Can we take config backup through IDM, as I regularly upgrade OS & signautures and need to take backup of our config. But in IDM I could not find any option. AS I solely want to use IDM for all purposes.Currenlty I need to do ssh,take backup and t...

I upgraded a PIX 515 from 6.3 to 7.22 and after the upgrade static NAT fails for the NAT translations using the same IP as the outside interface. I see the connection being dropped before it hits my outside access-list with PIX7-2-710002 tcp drop ip ...

I know that this was supposed to be fixed in 3.1, but I can't seem to get anyresults when running standard capture commands on any interface even though I'm sure traffic is flowing. This is a FWSM in a Cat 6500, running IOS 12.2(18)in multiple contex...

I have been trying to find a single document example of basic multi-context config examples for the case where there is need for two independent virtual firewalls to two provides (no failover or route tracking). Any CCO url's appreciated.

Anyone knows if it is possible to pass this traffic trhough ASA in transparent mode?I have tried with ethertype but it doesn't work.

I need to allow a screen capture/keylogger component of some software we use to function. The software records phone calls and matches them with key strokes and screen captures for customer service management.This software uses \WINDOWS\System32\Driv...

Is it best to use the default Groups in the CSAMC such as desktop, laptops and servers instead of cloning them and then using the group? What is the best practice or advice?Thanks,

Hello,We have CSA MC v5.2. I have put a pre-defined CSA on a server (seperate from the CSA MC), which installed successfully and the MC sees the host. However, although a pre-defined CSA is successfully installed on a host (non-server), I am unable...

hello dear freindsI have a problem i want to ping my dmz interface via my pcbut cant do thatplease help

My customer has an ASA running 7.2.2, a Cisco 2950 switch and a Cisco 2621XM, the router is located at the outside interface of the ASA, which IP subnet is 172.16.1.0/24. End users and a FTP client are behind the ASA, that means all the clients are l...

I am subscribing to a spam filter service that requires inbound access through my PIX. I need to allow 5 different IP addresses for smtp traffic. Will this configuration work?access-list outside_access_in permit tcp 12.158.34.0 255.255.255.0 host 6...

Hello everybody,i'm new into the whole PIX thing, so i'm sorry if my question seems to be "easy". :-)I was looking at the config of a PIX where i need to do a upgrade of the IOS and the ASDM via CLI. If i compare it to a router, where i know what i'm...