Network Security

Hi All,I am a newbie in PIX!! (now a days its ASA).I am creating IPsec tunnel from PIX with Checkpoint NG R55.I have config ready with me for pix but having one doubt about NAT & NO-NAT. I am configuring NAT tunnel.In PIX I have configured VPN ACL as...

I have an ASA 5505 at home and I am currently staticly NATing my internal resources to the outside world successfuly. My only problem is that when I try to access my internal resources by name from the inside, they resolve to the IP of my external in...

I am setting up a brand new PIX firewall. I am wondering if there is a quick way to import the configuration from a linux machine running iptables into the PIX 325. If I save off the config as a flat text file is there an import feature for the pix? ...

Hi. I am having an issue. I have a PIX 515E w/FO. We run an ERP that has a VPN directing all ERP traffic to our hosted site. We have used this for over 5 years and the ERP vendor is upgrading the systems we use. TO do this, we are running Production ...

Hi All,We have a webserver hosted on DMZ. A Static PAT on port 443 results in intermittent connection (Internet explorer displays Page cant be display immediately and sometimes works fine) while a STATIC Port redirection from 444 port makes the webse...

I need to remove one NAT which is there, through GUI it wont allow my saying some security rule warning. i also tried to disable security rule and tried but still couldnt do it. now i was thinking to remove from command line. the NAT is shown belowst...

I have a static nat table with this rule( i have put in X to cover my publci ip for security reasons for this post)static (inside,outside) 65.91.XXX.XX 192.168.211.1 netmask 255.255.255.255 0 0How do I remove just that one line without clearing the e...

i have 2 asa running active/passive connected to a 2 core switch running hsrp. i need to have 2 coonections on both the asa's. one going to the core1 and another going to core2.question. Is it possible to have 2 asa interfaces to have single ip addre...

Hi,can any body tell me what is the command to allow traceroute in pix.

Hi,I've Cisco devices ASA 5505 ver 7.2 software. The issueinvolves SNMP, specifically the monitoring of traffic counters tocreate traffic graphs (MRTG). I can poll the device and Iget a response. I can list interface descriptions/ip address etc.Every...

Hi,I have 2 questions related to Remote VPN authentication:1- I wold like to check whether I can integrate remote IPSec VPN authentication with an external AAA server or not, because I couldnt find such option when creating users in the firewall. If ...

Now I can reach the firewall from internal network. But still don't get internet access nor can I see dmz.CiscoASA# show routeS 0.0.0.0 0.0.0.0 [1/0] via xx.xx.xxy.1, outsideC 10.16.0.0 255.255.252.0 is directly connected, outsideC 10.16.52.0 255.255...

HiI'm not exactly sure if I'm thinking about this right, could you please advise?I have two PIX's running in statefull active/standby failover. I want to upgrade those from 7.0(2) to 7.0(6).I figured out that what I need to do is:- go to the standby ...

i have a Cisco asa5505 firewall running code 7.2. I uploaded the file (sslclient-win-1.1.3.173.pkg) into the disk0 without any problems, but when i issue "svc image disk0:/sslclient-win-1.1.3.173.pkg" i get an error message saying... ERROR: Not a val...