Network Security

Hii'm just converting my ACLs to use object-groups and just wanted ti check the ACLs I have written are OK. To start with I have some ACLs of:access-list example permit ip 192.x.x.0 255.255.255.0 10.x.0.0 255.255.0.0access-list example permit ip 192....

I have two PIXs one in Active and other in Standby mode .I had face some problem in standby PIX ,due to which I want to change my Standby PIX. Kindly let me know what all steps should I keep in mind before going ahead to do this activity.Those are PI...

Hi friends,There is a ASA 7.2 acting as a VPN gateway for a Remote Access VPN. There are primarily three networks behind the ASA inside network that are accessed by Remote VPN clients. They are: 192.168.7.0192.168.8.010.10.0.0There is an access-list ...

I want to configure a active/active failover using asa5520 and ips ssm module in itwht i have tried but before that i will connecting the interfaces of these firewalls to a 3548 switchwht i hv triedasa1---g/0 goes to a 3548A switchasa1---g0/3 is the ...

Hi all,We have configured a user on 1 of the PIX firewall's witch privilege level 15.When we do a "sh run" or "sh user *****" the it shows us that the configured user has a privilege level 2 instead of 15.When I logon with the specific user and then ...

Hi,I've got a headache with the failover of 2 asa 5540 in master/standby configuration. I've already 2x 5520 in master/stanby and they are working OK.The command sh fail on the 5540s shows:Failover OnFailover unit PrimaryFailover LAN Interface: failo...

Hi,I can't seem to find the bin file on CCO for the FWSM. I want to upgrade the blade to v3.2.1 but need the ASDM bin file. Any ideas why it's not there in the FWSM download section??Cheers,Matt

Hi!Is it possible to chain two contexts in one 6500 FWSM so that for example vlan60 is outside (x.y.36.98/29) for FW-one and vlan61 inside for FW-one (IP x.y.37.1/24) and vlan61 is also outside for FW-two(IP x.y.37.254/24). Vlan62 is inside(IP x.y.38...

Dear ALLi have one ASA5510 firewall i configure it as outside and inside and dmz , i have one web server at DMZ i have als one SQL server at inside , i have to transfer the data netween the inside SQL server amd the DMZ SQL client the firewall did no...

I wish to open up an RDC port but would like to secure it down to a specified IP only Can i do this with ACL list if so can you give an example

I just got a Pix 501 and it didn't come with any instructions on how to setup and configure. I will be using this for my home behind a DSL modem. Can someone point be to some good documentation on how to do this. TIA

I've a dmz interface and outside interface that's connected to the Internet and also I've an inside interface that's connected to the inside network. My problem is that I can't connect to the dmz to the inside through the MS SQL Server 2005, I alread...

Hi , Will UR license on both the PIX can solve my purpose of running one PIX in Active mode and the second PIX in StandBy moderegardsNeo

Hi,I have just put a web server into a DMZ zone behind a PIX 520. I have a bunch of users on the inside network and then a card for the outside network.Our DNS is offsite IE not behind our firewall and we are currently on NT4. So the internal clients...

I have recently upgraded an ASA from version 7.0 to 7.2.2. After the upgrade a number of nat statements had been removed. This was related to icmp specific acl's in the nat acl's. After resolving this, the nat statements were re-added at the end of t...