Network Security

Can you add more than one community string to PIX firewall running 6.3?If so,Is it an ok practice to have a RW string on a PIX firewall in addition to the RO string?

i have a vpn user that i want to restrict access to only one subnet.we are using a cisco vpn concentrator 3000 series.

I have a PIX 515E with a 4 port FE card and an ASA 5520 with 4 GE interfaces and I need to know if I can enable isakmp on two interfaces on the same firewall. I have included a drawing for a little better understand of what I am trying to do.

I configured a PIX 506E with two internal vlans. One vlan is called DMZ and the other is called vlan4. I want a device on vlan DMZ to ping a device on vlan4. In order to make this possible, I needed to create an access. However, I can not get my ...

Hi,we are receiving hundreds of the following entries in our syslog. I have checked the timeouts and all seems fine. All timeouts happens at 20 seconds. %FWSM-6-302014: Teardown TCP connection 145769459373785053 for outside:<ip add>/3873 to inside:<i...

I have a Pix 515e that I need to forward a port. this should be a simple task but for some reason it is not working. I have attached my config file I need to forward FTP to mcs-sbs01 I have the nat setup in the config I attached it has ** above and...

Trying to find out what the command would be to make a "Comment"Thank you.

Hi,Actually , i installed CSA MC on a server (its name CSAMC.NMEG.Loacl), and i tried to install the CSA on a group of servers . The CSA MC and these servers are in the same domain. One of these servers (its name EG-NMEG-BACKUP.NMEG.LOCAL)is register...

We are using Cisco Security Agent 5.1.0.79. We have 491 clients, mostly Win XP.We have noticed that within 3 days of CSA installation on a PC, WMI quits working. If you try to connect to a PC using wmimgmt.msc, you get the message: "Failed to connect...

Hi I am getting the following errors when trying to ssh between 2 servers over the VPN tunnel. I see it is going out of my acl_inside access-list but I do not see it reaching the VPN acess list. There is no natting between the 2 ips.# no natting fo...

if I purchase ASA5510-SEC-BUN-K9 bundle, will I get two units or just one? In case of just one, what exact part no must I order in order to have two units in failover?thanks

I have some questions regarding an access-list applied tinbound to a DMZ interface.1. If the firewall is stateful, and the NAT statements are set up correctly, then anyone from an inside interface should be able to access anything on the DMZ interfac...

I made a simple pix config for inside to access internet,,,For tht we have purchased 6 prublic ip's from isp provider, i m using one of the ipinterface Ethernet0ip address 202.63.101.68 255.255.255.248 interface Ethernet1ip address 10.50.0.200 255.25...

ASA Version 7.1(2) !interface GigabitEthernet1/0 media-type sfp speed nonegotiate nameif inside security-level 100 ip address 172.23.192.68 255.255.255.248 !interface GigabitEthernet1/1 media-type sfp nameif outside security-level 0 ip address 60.13....