Network Security

HiI have pix 535 with failover os 7.0.When I am connect the firewall to network some of days it changes Active to passive. now last two days primary router auto reboot. when Primary router reboot then time failover ruter active and after some of hour...

Just got a new ASA 5510 and I am having a hard time letting any trafic through. I can ping the outside interface xxx.xxx.xxx.xxx but none of the ports are open.Ethernet0/0 outside xxx.xxx.xxx.xxxEthernet0/1 inside 10.10.10.10The nic on my iis server...

Hi, Kindly Indicate for below scenario, Static necessary or not for Inbound Conncetion If I need to hide my Internal IP Address to Outisde Users.I am not able to access my Inside Server. nameif ethernet0 outside security0 nameif ethernet1 inside secu...

I have got 2 no's of asa 5520 one gest hanged in around 40 minutes and the other does not boot up, the LED for the poser does not come up, led for the flash is amber and the, vpn amber pleas let me know what could be the problem.thanks

Hi,If I have interfaces which are up but were left with no IP addresses; is there any risk for L2 attacks here if somebody got physically connected to any of them?Regards,Haitham

I have a PIX 525 that connects to a 6508 switch. The switch port is configured to auto and the PIX is 100 full. I trying to connect packet filter box in between. If I change the port configuration on the 6509 to 100 full, traffic drops. If I put it b...

Hi,I am reviewing the PIX config of my client who is configuring deny ip any any ACL on the failover interface between the 2 failover units!! I was confused of this configuration and just would like to check if this will deny the stateful information...

How do you troubleshoot drop packets on the asa. What could be the cause?ciscoasa# show interface insideInterface GigabitEthernet0/0.100 "inside", is up, line protocol is up VLAN identifier 100 MAC address 0018.73d6.eb96, MTU 1500 ...

I am using Cisco VPN client to connect our one remote office.Unfortunately the IP pool range defined in remote office is same like my local LAN I mean my LAN is 192.168.1.x and VPN client IP also 192.168.1.x. After connection I can connect remote off...

crypto identity - this command does not work in any configuration.who has an example that was fully tested - the TAC example does not work and is the opposite of the command reference. the syntax is not clear, rarely the IOS accepts the DN with comma...

hello expertsi am in the middle of a serious problem and have to decide on one that is to use policy nat or static nat.all i want to know is which one is a better option to use if considering that fact that there will be really high volume of traffic...

Hi,I have a pi 515 , and the next hop to it is an internet router.I have the below statements as part of the nat:---------------------------global (outside) 1 61.8.146.97nat (inside) 1 192.168.44.0 255.255.255.0 0 0---------------------------When i t...

Hi There,If I did the follwing configuration:static (inside,dmz) 10.1.1.255 10.1.1.255 net 255.255.255.255Where 10.1.1.0/24 is my inside network and I configured an access-list allowing all the traffic from the DMZ to the inside network. Will the ASA...

I have a problem with ip inspect on a C 827 router. When i want make a connection to outbound it can not make a session with ip inspect firewall. When is use the command sh ip inspect session i don`t see details. If i disable access-list then everyth...

Hi all. I have small problem I need help to figure outI have a Global statement:global (outside) 2 1.1.1.10 netmask 255.255.255.240And my nat statement is:nat (dmz2) 2 0.0.0.0 0.0.0.0 0 0Now, I have a host inside DMZ2 that wants to talk to my PIX's o...