Network Security

Hi all,I am looking for help in setting up address translation on an ASA (version 7.2) with the following scenario:-- four network interfaces: inside, DMZ1, DMZ2, outside-- inside and DMZ1 have limited number of subnets, DMZ2 has many subnets (routin...

DearI need to solve the below issue for which i need ur helpPIX with ISA in series to the inside interface .PIX inside ip 172.16.1.2/24 and the ISA server outside 172.16.1.1. ISA inside goes to the internal network where 5 servers are located to give...

Hi,I have some query regarding firewalling and GRE tunnel traffic.The quieries are like this1) Will I be able to inspect the traffic that is encapsulated on a GRE tunnel by putting a firewall (PIX or ASA) on the path of the GRE tunnel traffic.2) If n...

We are seeing that the Pix 515E we have setup as our external firewall for ftp traffic does not setup the right port for the data channel. We have setup a passive ftp server behind the PIX but intermittently when users try to connect the ports that t...

Hello,Would it be possible to do some type of source routing from ASA to 2 WAN routers.I'm trying to send 3 subnet(vlan) traffic coming from ASA inside interface to 2 outside interfaces connected to 2 routers. Does this make sense ?

I am at a customer site looking at a PIX config. there are many statements all over the config about PDM, including statements which fundamentally allow different networks and hosts to connect to the PDM engine resident in flash.I performed a sho fla...

Everything is set to the default in my AD policy and the KB's that are generated everyday by the sensor are the same. When I view the KB, the Scanner Threshold (Learned) and Histogram (Learned) columns are empty. How do I configure the IPS to actuall...

I have approxmiately 160 CSA agents on (mainly) laptop clients. I receive a large number of email notifications stating the following each day:---------------Severity: AlertThe process 'C:\WINDOWS\system32\svchost.exe' (as user NT AUTHORITY\SYSTEM) a...

Hi All,I jsut need some help in making sure that the following statements are correct. Here is the scenario.Our inside private addresss 10.x.x.x always gets NATed to a public IP on the outside. Now I have a situatuion where we do not want to NAT the ...

When using the following ACL on the router side of a PIX to 2651XM VPN, no connectivity is established until the Access-Group is dropped from the FastEthernet0/1 interface - then it comes up and works fine. . We need to harden this FE interface as it...

Hi all.This is my first setup of a Cisco ASA box.I'm having a lot of problems with use of static routeIf I make a PING from the ASA box, I get a replay.But if the ping comes from a computer, I keep getting: Deny inbound icmp src inside:XXX des inside...

Recently I installed the CSM 3.1 suite, which comes with IPS Event Viewer version 5.2(1.4).I have set up the automatic archive feature to archive the IEV database daily at 23:45, but this doesn't work. I do get daily archive files with a size of 0 by...

I'm sure that this has been asked before, but...I have a VPN client behind my PIX 515E going to a remote site with a 3000 series concentrator. I can establish the tunnel, and though my client can send packets it never receives any back. I need anothe...