Network Security

I have two diff. Pix 5510's that show diff crypto isakmp statements for creating crytpo tunnels. The statements are slightly different for the current version of IOS used. Wondering if the diff vers of IOS causes the obvious difference in statements?...

I have a couple of questions about peer configuration.The peers do not have to match end to end on VPN config?I am looking at a scenario that has the main site configured to peer to the remote site's backup wireless router. The wireless router is fac...

Hi, I have three locations with static IP's. At each I am using the same 800 series router. How do I config a VPN between all three? One location hosts my server, the other two are remote desktop locations, using terminal services to access the serve...

Hello,Sorry Im quite new to Pix firewalls.Our testlab is separated by a Pix firewall from the production network.The testlab being the outside interface.A similar network addressing scheme 10.103.x.x etc. as production has been used in the testlab.If...

Hi everybodyI need to implement two level for firewalling for my Noc. 1st level Internet firewall and 2nd level intranet firewall for WAN users. The wan users has to cross this 2nd level firewall and go to 1st level firewall to access dmz server from...

Hi,I have a problem where i cant telnet to one of our ASA firewalls anymore. I can ASDM to the box and see the logs when i try to telnet to the appliance and i get the following message:TCP connection limit exceeded from 10.XX.X.XXX/3172 to sopdc:10....

I would like to find out on what is the best practice on setting up Windows Media Server on DMZ. I am trying to setup a WMS server on the DMZ and would like this DMZ server to communicate with my SQL server on my internal network. Below is my configu...

I am looking into the bufferoverflow events in CSA and need your assistance in this one.Here is the event:The application 'C:\Program Files\Internet Explorer\iexplore.exe' (***) tried to call the function VirtualProtectEx("<self>") from a buffer (the...

I have been tasks to upgrade our CSA-MC.CSA-MC 5.1.0.69 ---> CSA-MC 5.2.0.203Has anyone already done this [A]and [B] did you run into any issue that would help be before the I begin.~TS

I am a novice when it comes to PIX. We rarley touch the configs.I need alittle clarification on backing up and restoring a config via tftp or hyperterminal.I have a PIX 506e running 6.3I am going to be adding an ISA server behind it, and configure a ...

hello,my customer wanted to implement IPS on network as well as HIPS on servers. Aside from the network IPS device, what else do i need to complete the system running? (ie monitoring/management etc)in HIPS, do i still need some management or monitori...

I've investigated this alarm before, and I think there are times when this occurs normally. I can't pinpoint an exact reason a device might use this normally though. I'm assuming it would have something to do with high availability...like a heartbeat...

I would like to find out if it's possible to configure my Cisco PIX 525 to use a secondary internet line from a different provider and perform load balancing. I'm using PIX Version 6.3(1)