Network Security

Hello,I currently have a main site with a 2600 series router passing all traffic to a pix 501. That Pix has previously established site to site vpns configured and working to two remote sites, each with a 1750 and a pix 501. What I need to know is if...

I am trying to prepare myself for the SNPA exam, and am stuck on the static command. I understand the basic IP to IP translation version of the command (static (IF/IF) IP MASK IP MASK), but I am lost when I start seeing numbers at the end of that str...

We have two PIX 525 firewalls running 6.3 in a stateful failover scenario.If I am foing to reboot the active firewall, would the correct process be to go to the active firewall and issue:no failover active and reboot the device?I think the inside Ite...

My company accesses WAN web applications (webmail) over a DMVPN tunnel. A problem with this is that normal Internet traffic can consume the entire circuit and then the corporate webmail becomes really slow. I decided to make a QoS policy to protect t...

Is there anything special that needs to be done to have Active Directory and .NET applications talk across the DMZ/LAN segments on an ASA5520? I have static (inside,dmz) 192.168.0.0 192.168.0.0 netmask 255.255.254.0 and access-list inside_to_dmz perm...

The IPSEC VPN client is supposed to work at the kernel layer while the SSL VPN CLIENT (SVC) is supposed to work at the application layer.Goal: SSL VPN into my ASA 5505 & establish a tunnelall policy to tunnel all traffic through my ASA5505 including ...

Has anyone else tried installing the latest patch with multiple virtual sensors with multiple sig configurations, event action rule configurations? I have been fighting this for a couple of days now. What I have found is that any sig/rule configurati...

Hi,Setup description:- 2 x ASA5510 version 7.2(2) connected with a crossover cable via failover interface.- Lan based failover- Stateful interface is the same as failover interface (Ethernet0/2).Config of Primary:interface Ethernet0/2! nameif failove...

Hi,I would configure Multiple Websense server for redundancy.What are the changes reqired into Cisco ASA firewall?What are the changes required in Websense Server?I would make one Active and another Backup.If i do down one another one should take ove...

I know that there are password recovery proceedures using the interface, address, server, file, gateway, and tftp commands. But what I was wanting to know if there is any other way to break the password JUST using a console connection like you would ...

We wanted to terminate a dot1q tagged VLAN at the outside interface of a PIX 501 firewall. But encapsulation dot1q command is not available under interface configuration mode of outside interface.(This method is available for all routers & we tried t...

I have a PIX 6.3 configured with an access-list inbound on the inside interface.I am allowing traffic from a particular host to a DMZ machine on port 80.I can see the keepalive on port 80 hitting the access-list but not where I would expect it.I have...

I have a client that no documentation of the PIX they have and the have 4 Tunnels setup. They are moving and are getting new IP's. I remember to view the isakmp keys was to do a wr net to a tftp server and it shows the passwords. I have done this but...

I have a ASA5520 that is the default route out of a network.I need it to redirect all outbound smtp traffic to another gateway off the network.I need the eqivalent of the following..access-list 103 permit tcp any any eq smtproute-map EMAIL permit 1ma...