Network Security

Hi,Just a couple of simple and quick questions for you. I have in my test use a PIX 515 and I noticed its out of date model that didnt even have info on it on Ciscos site (that i could find).Is the only major difference between these 2 devices that P...

Hello, I have CBAC configured on an ISR and was wondering if temporary openings in ACLs will always show up when comitting the "show ip access-list" command. My assumption is that CBAC is not really opening temporary ports on acls at all if it doesn'...

Hi there,We have recently implemented a VOIP system here and are currently having problems with remote users. Basically, they cannot have a conversation unless they keep trying and then it will work maybe on the third or fourth time.I have checked th...

Hello, I have a general question regarding firewalls, but specifically as it pertains to the CBAC firewall feature set on, say, a 2811. Assuming that I have an ISR with a serial interface on the WAN side and an Ethernet as the LAN side, an ACL set up...

Trying to connect a remote client using SSL VPN through web interface. When attempting to ping LAN side (192.168.1.2) through inside interface I am getting this in the log -Deny icmp src inside:192.168.1.2 dst outside 192.168.50.1 (type 0,code 0) by ...

Hi Guys,I did some research how Cisco IPS HA works, but no lucky to find out based on followed statement, anybody can explain how to achieve this ?"Resiliency and redundancy can be delivered through unique network collaboration; for example, Hot Stan...

The the light on the branch office ASA5505 VPN is green. We can ping the public IP. We are not able to start a telnet session on the ASA's public IP "Could not open connection to the host, on port 23: Connect failed". Telneting to the ASA's private I...

Does anyone know of a way that i can turn on Secure desktop for on group policy and not turn it on for another one? Meaning if i login as one group policy SD wont run, if i login as another it will download an run

We currently have a Catalyst 6509 which terminates the IPSec/GRE tunnels. We would like to then connect our ASA5540 to this 6509 to inspect the traffic once the packets have been decrypted and then send it back again to the 6509 to route it to its fi...

Dear All;i have PIX 525. i have configure PIX in such a way that my all Exchange, VPN, any inbound traffic would cross the firewall. i also define some conduit against smtp, imap, www, pop3, https. now when i tried to implement a Access-list on outsi...

Dear All; i have PIX 525. i have configure PIX in such a way that my all Exchange, VPN, any inbound traffic would cross the firewall. i also define some conduit against smtp, imap, www, pop3, https. now when i tried to implement a Access-list on outs...

Hello,the organization I work for has purchased two Cisco ASA 5500 series and wants to get rid off two PIXs (515E, image 7.1) and use the Cisco ASA to do Firewalling plus VPN. Well this is my frist exposure to Cisco ASA and I have read almost all the...

I have a remote location that connects through Sprint to my central site (NYC)via a Sprint directed VPN called a half-tunnel. I recently had a new circuit installed at the remote location for redundancy which points to the Internet and I have set an ...

I am trying to configure logical interfaces on a PIX 515 with 7.2(2)The documentation for the PIX 6.3 shows the steps:interface ethernet0 aut0interface ethernet0 vlan2 physical interface ethernet0 vlan3 logicalnameif ethernet0 outside security0nameif...

Hi.We have a very interesting problem. Using KIWI as a syslog server, we are trying to record each and every time a user logs into a pix or asa device and ALSO every command entered. Is this possible via programming on the security device OR MUST it ...