Network Security

I upgraded a PIX 515 from 6.3 to 7.22 and after the upgrade static NAT fails for the NAT translations using the same IP as the outside interface. I see the connection being dropped before it hits my outside access-list with PIX7-2-710002 tcp drop ip ...

I know that this was supposed to be fixed in 3.1, but I can't seem to get anyresults when running standard capture commands on any interface even though I'm sure traffic is flowing. This is a FWSM in a Cat 6500, running IOS 12.2(18)in multiple contex...

I have been trying to find a single document example of basic multi-context config examples for the case where there is need for two independent virtual firewalls to two provides (no failover or route tracking). Any CCO url's appreciated.

Anyone knows if it is possible to pass this traffic trhough ASA in transparent mode?I have tried with ethertype but it doesn't work.

I need to allow a screen capture/keylogger component of some software we use to function. The software records phone calls and matches them with key strokes and screen captures for customer service management.This software uses \WINDOWS\System32\Driv...

Is it best to use the default Groups in the CSAMC such as desktop, laptops and servers instead of cloning them and then using the group? What is the best practice or advice?Thanks,

Hello,We have CSA MC v5.2. I have put a pre-defined CSA on a server (seperate from the CSA MC), which installed successfully and the MC sees the host. However, although a pre-defined CSA is successfully installed on a host (non-server), I am unable...

hello dear freindsI have a problem i want to ping my dmz interface via my pcbut cant do thatplease help

My customer has an ASA running 7.2.2, a Cisco 2950 switch and a Cisco 2621XM, the router is located at the outside interface of the ASA, which IP subnet is 172.16.1.0/24. End users and a FTP client are behind the ASA, that means all the clients are l...

I am subscribing to a spam filter service that requires inbound access through my PIX. I need to allow 5 different IP addresses for smtp traffic. Will this configuration work?access-list outside_access_in permit tcp 12.158.34.0 255.255.255.0 host 6...

Hello everybody,i'm new into the whole PIX thing, so i'm sorry if my question seems to be "easy". I was looking at the config of a PIX where i need to do a upgrade of the IOS and the ASDM via CLI. If i compare it to a router, where i know what i'm do...

Hi All,I have three pix's connected to three external Wan Links.I am wanting to share each pix default route to one another so I have ISP resiliency. It is mainly for load sharing, so I can maximise on bandwdith not being used, on low user sites.They...

Can I have on PC on the inside of my firewall say 192.168.2.2 go out through my firewall on ports 6000 and 6010, but show up on the other side as two IP's depending on which port it is talking to.So,192.168.2.2 port 6000 would translate to 192.168.8....

hi all,I have a document in that it got details like these.pix535 model:rated output:1gbps+upto 95 mbps 3des vpn,2000 ipsec tunnels,concurrent connections: 500000i would like to know the exact meaning of this representation.thanking you,prashanth.