Network Security

I need to migrate some customers from Checkpoint over Cisco Pix firewalls, NOT ASA.Currently in the checkpoint security policy, we onlyallow snmp version 2 and version 3 to traverse thefirewalls. Furthermore, we also allow only ssh version 2 from tr...

Not sure if this is the right forum for this questions. I have a vpn concentrator 3005 with it's private interface connected to a dmz interface on my pix. The public interface to a hub hanging off my router facing the internet.I have a vlan set-up ...

Hello,An existential question:Why the FWSM doesn't support hsrp or vrrp ? Is it possible to see something like that in the future ?In a robust solution, 2 routers in front of the blade (in multi-mode) with 2 routers behind the blade need to peer BGP ...

Good day folks,I have tried hard to find examples for the following scenario without luck. Here is my IOS (not PIX) problem:Because of overlapping addresses problems, I have to allow internal clients to connect to servers through a router with static...

Hi;Can I setup multiple context A/A setup on ASA 5520 , and have the fastethernet configured for DMZ access , and Can A/A been setup on DMZ side ?

Hi There,Can source-based routing be achieved in ASA, as in routers with route-maps, using the policy and class maps configuration?Regards,Haitham

I am going upgrade my Cisco 3660 Router by one Cisco 3845 ISR, I need Firewall Feature Set in my new router but I have to use the NM-1A-E3 used actually. Is compatible the CISCO3845-SEC/K9 Bundle with IOS Advanced Security for the NM-1A-E3 module? Th...

Is there any change required for intervlan comm. on FWSM with same sec levels other than usual conf like sec level,ip add,nameif on the specific int/vlan.

how does intervlan comm. happen in FWSM.

Hi all, I use IDSM-2 (IPS version 5), now I want to reset all of signatures to default. You can show me the command to do. Thank you very much

On our PIX515 6.2(4) we had to do "no fixup protocol ftp 21" to prevent our ftps from hanging. How can we do the equivalent command in the ASA 7.2(1)? I've seen posts about the "inspect ftp" in the global policy, and other posts about modular policy ...

Hi,I'm an IOS FW newbie, so please bear with me.I have my mail server hosted on my LAN and NAT'ed thus:ip nat inside source static tcp LAN-IP 25 interface FastEthernet0 25ip nat inside source static tcp LAN-IP 110 interface FastEthernet0 110access-li...

Hello!I am trying to update WS-SVC-IDS from 4.1 to 5.0(1). The output:s(config)#upgrade ftp://x.x.x.x/IPS-K9-maj-5.0-1e-S149.rpm.pkg User: abc Password: **** Warning: Executing this command will apply a major version upgrade to the application partit...