Network Security

for some reasons that i can't figure out, a PIX 515E is unable to translate internal IP addresses. I get the following errors:Apr 25 2007 18:38:54: %PIX-3-305006: portmap translation creation failed for tcp src inside:10.1.1.112/2865 dst outside:198....

I had to customize all the agent kits due to application requirements. However, I notice the deleted agent kit are still being compiled during a rule generation. Is there any way to purge them ?

Currently I only need a password to connect to my routers and firewalls. I want to have better security by requiring a username as well. Would that be the "username" command? AND once that is setup, will it always require a username from then on b...

If I need to give access to a class b network in an acl/static statement would the following statement work...access-list acl_out permit tcp host xxx.xxx.0.0 host my.outside.ip eq sshstatic (inside,outside) tcp my.outside.ip ssh my.inside.ip ssh netm...

Is is possible for a remote access vpn client to connect to a server on the inside or dmz with it's outside address? ASA 7.2.1

hi, i had successfully installed the Cisco ISC 4.2 on my SunFire V125 Server which is running on Solaris 10 and i was also successful to login to the ISC for the first time using the Solaris Java browser. however, after i reboot the machine i could n...

Hello all,We have new ASA 5520's and I need to deny traffic from inside to specific outside IPs. How can I accomplish this without denying traffic to all other outside IPs? As soon as I add the rule to the inside interface, it removes the Permit to...

Hi all -Had an interesting problem today, and I was wondering if someone might be able to explain to me what could have been happening. I had this user that couldn't connect to the internet. After some snooping around, I noticed that the firewall ...

I would like to restrict user access to the internet via username and password on a Cisco 851 router. In other words I would like the user to be prompted with a user name and password in order to access the internet. Is this possible via AAA or ACL?...

HelloI have a PIX 515E (Ver.6.3.1)with three interfaces. Now I d'like to activate the DMZ interface with a official IP-address range.Between the internel and outside interface is a NAT (PAT) configuration active. No, I have problems to configure the ...

SEGMENT LAN 192.168.0.0 255.255.255.0 192.168.0.10 192.168.0.20 PROXYI PROXYII 192.168.190.10 192.168.190.20 192.168.190.250 PIX 506 INTERNET I would like that ...

Hi,I have been asked to install a new ssl certifiacte on a Pix 515e. I believe the current certifcate was made in house and they now want to change this to a geotrust certificate. I've trauled through this forum and have found a few articles etc but ...

This was asked before, but not really resolved, so I'll ask again in hope of the new tread getting noticed.There is a "What's New" document for FWSM Software v3.2 (http://www.cisco.com/en/US/customer/products/hw/modules/ps2706/prod_bulletin0900aecd80...