Network Security

we have pix and it has "tunnel-group 1.1.1.1 type ipsec-l2l" config statement.we are changing 1.1.1.1 to different IP and need to remove/modify "tunnel-group" command. How do we do it? I am having trouble removing it.Thanks,

Hi all,Last week I purchased a brand new ASA 5510 with AIP-SSM (ASA5510-AIP10-K9). It came in with ASA version 7.2(2) and IPS version 5.1(1)S205.0.I cannot monitor the IPS from within ASDM because IPS 6.0.1 or higher is required. My questions:1. Why ...

can someone help me with active/active failover config on asa 5520

I'd just like to share with the group something that I learned the hard way. It's ebarassing, but I'd like to keep anyone from getting as frustrated as I was.About 24 hours straight of battling a pair of 5510's and a 5505 and they will now finally p...

Hello all,I ask me about something:PC1----Inside-PIX-Outside----PC2I have a global on inside and nat on outside.I use static (out,in) @ipPC1 @ipPC1 because the computer on ouside need to connect on internal IP of the PC1. My question is, when pc2 sen...

I am having an issue with trying to get a ping through a PIX515 with OS6.2(4). The message I keep getting, and I am unsure as to why, is as follows:106011: Deny inbound (No xlate) icmp src ACCNT:ACCA2-BK_Fas00 dst ACCNT:ACCAS1_Tunnel3 (type 8, code ...

Hello:Gotta start by saying, I'm new at this, so please indulge me.The following is the current version of MY ASA/IPS software:Platform: ASA-SSM-20 Build Version: 5.1(1)S205.0Signature Update S205.0 2005-11-30Os Version: 2.4.26-IDS-smp-bigphy...

Hi,I am using an ASA-5510 with AIP-SSM, running 5.1 E1.I am getting a lot of false positives from one internal relating to a TCP SYN Sweep.I would like these not to be logged for this single host, but don't wish to globally disable or retire the sign...

HI ALLI want to do 642-532 IPS paper, i have all the learning material, but i donot have any IPS device to practice. Can anybody help me out that how can i prepare for that exam. Please recomend me the material and simulation kind s/w to succeed in t...

Just need little advise how to get a comfort level with CISCO PIX Firewalls.I have recently purchased PIX 501.Thanks

|May 31 2007 18:59:20|106001: Inbound TCP connection denied from 10.0.0.0/1891 to 192.168.0.0/23 flags SYN on interface OutsideI am receiving this error for both tcp and icmp traffics. I can ping from 10.0.0.0 network to the outside interface, but I...

Hi net pros,We use CSA to protect a few call manager clusters. On the old call manager clusters we had the standalone CSAgents running. With an update to a new call manager version we will setup CSA MC 5.2.In the lab we use the predefined policies fo...

I just purchased a used PIX 501 Firewall and need to know what OS version it has by default?ThanksData Sheet