Network Security

Hope anyone of you could help ..i would like to know the max. no. of security policies or ACL and no. of object that the ASA 5510 could support .. i think it might be memory dependent .. but if the no. of acl increase, the throughput would decrease o...

Hi, I would like to know what kind of performance problems could I have if I configure two ASAs 5520 doing Active/Standby Failover using the same LAN interface for the failover link/stateful llink.That?s because I need to use two outside interfaces.

Here is what I am trying to accomplish using an ASA 5540/Steel-Belted Radius/Active Directory. When a user connects via SSL they are able to select a group from the drop-down list on the login page.Unfortunately as long as they have a valid active di...

Problem: We try to configure Initial Sequence Number (ISN) Randomization but we see varying information on CCO websites about its operation. . Details: "I'm trying to determine the a...

Everytime I enable loggin with my PIX 515E and arandom amount of time passes it will completely close down all access through the device. Any help would be appreciated. I am running ver. 7.0(1) and I have attached a copy of my config. for all to che...

HI,Iam trying to establish VPN tunnel between a Linux based firewall and vpn concentrator 3030 can somebody help me out in this.public port is connected logically to DMZ zone and is natted to public ip.the private port is connected to the inside netw...

Hi ppl!I have a unstable PIX, running 7.2.2 - with a public Verisign cert on it.Now I need to restore this PIX's conf onto a new PIX hardware, but when pasting the conf in, the part with the Verisign Cert is failing. This is probably due to the self-...

Dear All,I need to setup the vpn tunnel between 2 sites.One site has the concentrator another site has the pix 515E.The site engineer from the concentrator side given the below details to configure the pix in my site.Concentrator site Tunel ip : 168....

Hi,I am facing this scenario.Mail Server on LAN (behind ASA5510) is Pri.IP.Add.1 with SMTP on port 25.This is to be NATed to Pub.IP.Add.1 from ISP 1 on port 25.Also to be NATed to Pub.IP.Add.2 from ISP 2 on port 26 (with port forwarding).Can anybody ...

Hello all, I have an example here. I would like to block access to our mail server from a spammer using an access list. Can anyone tell me if this is correct?Spammer: 201.86.141.99Mail Server: 209.24.251.74Would this be correct?access-list access_l...

Hi all,I have one PIX 506e, on inside lan there is one PC client, on this client there is SSH Sentinel VPN Client software for connect this PC to a Remote lan protected by Zyxel Router/firewall.When I activate Sentinel software,VPN Tunnel goes ON but...

Hi there, I have a ipsmc 2.2 sp 2 and trying to upload a sensor v. 5.1(4), I receive the issue "Import failed due to exceptionError importing configuration files from sensor- Unable to get sensor version. Sensor may not be reachable". But looking to ...

Hi guys i am running into an issue while importing my IPS using the VMS. The VMS either shows 5.1(5) E1 or 5.1(4)E1s286 what i have installed is 5.1(5)E1s286. Now whenever i do an import of this sensor the progress viewer always shows the error as "I...