Network Security

I want to configure a PIX 501 firewall for NAT - or more accurately PAT.I want all inside users to be able to access the Internet using their non-routable IP adresses that the PIX will translate at the perimeter.I only have one public IP address avai...

I am trying to enable sylog logging to a Windows server thru my inside interface to beable to capture my VPN traffic. Everytime I enable logging my inside interface drops until I Disable logging. Please help, I'd like to be able to review all of my l...

Hello,I'm using a 2811 with one HWIC-2 DSL module, as router-firewall. I want a failover configuration,with Fa0/0 as primary WAN interface, Dialer0 as backup and one HWIC-4ESW (designed vlan1) as LANinterface. Fa0/0 has a fixed public IP, Dialer0 has...

HiI'd like to allow telnet access to ip 192.168.2.1 and 192.168.2.2 from our internal zone which has the ip range 10.0.0.0/8. Could someone please give me an example of how to do this, or point me in the right direction.Many ThanksDan

Hi ,Can anyone give me the Cisco TAC tollfree number,( I am in India) and proceedure to reach Cisco TAC through tollfree.I have raised teh TAC request for PIX firewall ,whcih has the SMARTNET CONTRACT with Cisco.It is very urgent.Thanks and Regards,S...

Hi all,I am looking for help in setting up address translation on an ASA (version 7.2) with the following scenario:-- four network interfaces: inside, DMZ1, DMZ2, outside-- inside and DMZ1 have limited number of subnets, DMZ2 has many subnets (routin...

DearI need to solve the below issue for which i need ur helpPIX with ISA in series to the inside interface .PIX inside ip 172.16.1.2/24 and the ISA server outside 172.16.1.1. ISA inside goes to the internal network where 5 servers are located to give...

Hi,I have some query regarding firewalling and GRE tunnel traffic.The quieries are like this1) Will I be able to inspect the traffic that is encapsulated on a GRE tunnel by putting a firewall (PIX or ASA) on the path of the GRE tunnel traffic.2) If n...

We are seeing that the Pix 515E we have setup as our external firewall for ftp traffic does not setup the right port for the data channel. We have setup a passive ftp server behind the PIX but intermittently when users try to connect the ports that ...

Hello,Would it be possible to do some type of source routing from ASA to 2 WAN routers.I'm trying to send 3 subnet(vlan) traffic coming from ASA inside interface to 2 outside interfaces connected to 2 routers. Does this make sense ?

I am at a customer site looking at a PIX config. there are many statements all over the config about PDM, including statements which fundamentally allow different networks and hosts to connect to the PDM engine resident in flash.I performed a sho fl...

Everything is set to the default in my AD policy and the KB's that are generated everyday by the sensor are the same. When I view the KB, the Scanner Threshold (Learned) and Histogram (Learned) columns are empty. How do I configure the IPS to actua...

I have approxmiately 160 CSA agents on (mainly) laptop clients. I receive a large number of email notifications stating the following each day:---------------Severity: AlertThe process 'C:\WINDOWS\system32\svchost.exe' (as user NT AUTHORITY\SYSTEM) ...

Hi All,I jsut need some help in making sure that the following statements are correct. Here is the scenario.Our inside private addresss 10.x.x.x always gets NATed to a public IP on the outside. Now I have a situatuion where we do not want to NAT the ...