Network Security

Hello,which hardware would you recommend me for following design. In the near future I will have to secure our mail server (1000 users), terminal servers 5 (100-200 users) and web server with firewall. I have 64 IP addresses and 100Mbit/s. Which dev...

We are getting the following error messages on our ASA 5510 with the following information:Inbound TCP connection denied from (yahoo mail server IP)/25 to (our outside IP)/15936 flags FIN PSH ACK on interface Outside We also have a queue of email to...

I made a simple pix config for inside to access internet,,,For tht we have purchased 6 prublic ip's from isp provider, i m using one of the ip interface Ethernet0 ip address 202.63.101.68 255.255.255.248 interface Ethernet1 ip address 10.50.0.200 255...

Hi all,I am implementing IOS IPS on a 3800 router but I am not sure if when I enable it all the previous TCP sessions already active across the router will be dropped by the inpsect (because the IPS never saw when all those sessions started).Any comm...

Hi allI'm running a productive ACS 4.1 server that authenticates wireless users using LEAP. Today, we had a service outage, and when I look into the log, among other messages, I can see the following authen-failure-code: Internal error.It appeared se...

We are just about to purchase a Cisco ASA 5505 Security Plus Firewall and would like to know the restrictions of useing the 2 POE ports, can they be used as ordinary ports with out this feature ?Can you turn off the POE feature for these ports?Do the...

Can you add more than one community string to PIX firewall running 6.3?If so,Is it an ok practice to have a RW string on a PIX firewall in addition to the RO string?

i have a vpn user that i want to restrict access to only one subnet.we are using a cisco vpn concentrator 3000 series.

I have a PIX 515E with a 4 port FE card and an ASA 5520 with 4 GE interfaces and I need to know if I can enable isakmp on two interfaces on the same firewall. I have included a drawing for a little better understand of what I am trying to do.

I configured a PIX 506E with two internal vlans. One vlan is called DMZ and the other is called vlan4. I want a device on vlan DMZ to ping a device on vlan4. In order to make this possible, I needed to create an access. However, I can not get my ...

Hi,we are receiving hundreds of the following entries in our syslog. I have checked the timeouts and all seems fine. All timeouts happens at 20 seconds. %FWSM-6-302014: Teardown TCP connection 145769459373785053 for outside:<ip add>/3873 to inside:<i...

I have a Pix 515e that I need to forward a port. this should be a simple task but for some reason it is not working. I have attached my config file I need to forward FTP to mcs-sbs01 I have the nat setup in the config I attached it has ** above and...

Trying to find out what the command would be to make a "Comment"Thank you.

Hi,Actually , i installed CSA MC on a server (its name CSAMC.NMEG.Loacl), and i tried to install the CSA on a group of servers . The CSA MC and these servers are in the same domain. One of these servers (its name EG-NMEG-BACKUP.NMEG.LOCAL)is register...