Network Security

I've inherited a PIX 501 firewall and want to change many of the settings used by the previous owners.I'm doing this in the CLI. The web based GUI gave me some problems (error messages about certificates and so forth). In fact, one of the things I'd ...

Clients on our LAN access websites using web proxy servers. One website (that is accessible from other LANs) does not work either through the proxy or directly.I can see conns (state table entries) between the clients and the site but no I flag to sh...

I have some users behind my FWSM who want to be able to initiate VPN using the Cisco VPN client to external locations.UDP and TCP are allowed outbound, and the FWSM obviously handles the return traffic. So the IKE tunnel establishes OK and authentic...

Hi,Have this issue that I need help with...I have 2 525Pix's running 6.3(5) in failover...The primary runs at a constant 60%-100% CPU usage and my inside and outside interfaces are running packet errors...When show proc the only process' that is high...

I already build 3 ASA clusters and have one more to do.The problem is that the last two ASAs can't build up there cluster relationship.Software:ASA = asa722-19-k8.binASDM = asdm-522.binI found out that the two ASAs have different show version outputs...

We have a pair of redundant 515e firewalls. A couple months ago users started complaining of slow performace between network segments. The common denominator seems to be segments seperated by the PIX's. We also discovered if we try to FTP files fr...

From a PCI compliance perspective, are there any differences between the small, medium and large store designs used in the solution?

I have a pix 501 and am needing to do some port forwarding. I have a DVR (being used for security cameras) it has an internal IP address of 192.168.1.150 I need to have port forwarding setup for 3000 - 3007 and 8800Is it possible to do this through...

Hi all,I have 3 FWSM modules that I am going to install on 3 different 6509, I am configuring the 3 FW modules in transparent mode with two context in each FWMS module.Do you know if it is possible to configure the following:- FWSM A has context 1 ac...

Hello,Is it possible for a host attached to interface A of a cisco ASA to build a connection to inteface B of the same ASA?If so how?I would like a laptop computer to be able to VPN to the external interface of an ASA firewall regardless of whether i...

I have a client who does not want to stop users from installing applications but wants to protect against trojan/worms/rootkit etc.It would seem these two competing philosophies would not be easily inmplemented within CSA.Is there a base rule module ...

We tried turning on the VA capabilities of MARS and it appears that they were crashing a number of services on a number of servers.Where can I get a log of what was scanned, what type of scan was performed, and when it was performed?Also how can I se...

Hello, I've got a PIX 525 and I need to deliver anti-spyware, file blocking, anti-spam, anti-phishing, URL blocking and filtering, and content filtering, thereofore I'd like to know if is possible to install the ASA SCS/CSS module on the PIX or it's ...

New to the ASA series. I am installing a 5505 later today. Company has two buildings connected via fiber. ASA will go behind the router and into a switch connecting the two. Main goal is to protect an iSeries webserver on their internal network. ...