Network Security

On a 525, in version 6.3, my understanding is that you cannot change an access-list per line as you can in 7.0 by line number.Is it acceptable practice, if you want to add a line in the middle of an access-list to just copy the existing ACL from the ...

Can you help with what seems to be a simple configuration issue?I am trying to get my static NAT to work from outside to inside.Cisco 506e v. 6.2(2)External address x.x.x.x nat'ted to internal address x.x.x.x for SMTP traffic.Internal address is mail...

Deny inbound icmp src inside:192.168.50.1 dst inside:10.100.107.24 (type 8, code 0)The 10.100.107 network is across the tunnel. When I attempt to access that network the tunnel comes up, but I can't get across.I do have 10 network on my side.

we are using DNS server on the internet, when this DNS goes down the PIX mem reach to 95%, what can i do to solve this problem.6.3(4) on the PIX

We have changed the configuration through the IDM on the local sensor. Now we have to re-import so CSM is synched up. The interface has changed substantially. Has anyone done this yet?

We recently added a failover 5520 with the ASA-SSM-20, which matches the primary ASA/IPS. My question is I just upgraded the primary IPS to 5.1(5)-E1. It went fine, except now the failover IPS is still on 5.0(2). How do I update the failover IPS to m...

I need some input on upgrading my existing CSA MC 5.0 to CSA 5.2 on a seperate server. If I do this will I have to reinstall all of the CSAs on my host servers? The documentation indicates use of migration tools...is that referring to the import/ex...

Hey guys.I have a typical dual FW-pair DMZ, with dual-homed servers on different Pvlans.Now, when I want to send traffic to the inside FW (a 6509-FWSM), we use two 4948's with static routes pointing to the FWSM virtual DMZ interface. The 4948 have L3...

We have a 5520 and just added a failover unit. I just upgraded the IPS to 5.1(5)-E1 on the primary, so when it reloaded, it failed-over to the secondary. Now I can't make the primary active again, nor can I login to the secondary. I get the user ID a...

I haven't finished my research, but this signature seems to trigger on the TXT queries used by SPF(http://www.openspf.org/). Anybody else run into this and were you able to resolve?

Dear sirs,i have cisco pix 515E with three interfaces Fastethernet0, Fastethernet1 and built-in in the pix and Fastethernet2 which is module.i upgrade it to ver. 7.0when i connect the firewall the fe0 and Fe1 is bring up and the light is ok but i can...

I have a site to site VPN tunnel established between a PIX 506E and an ASA5520. I am able to ping across the VPN to the DNS server and I am able to ping from the DNS server to the remote computer I am using for testing.This is going to be implemente...

I have a customer who is adding a second internet T1. The ISP delivers the Internet as ethernet via their CSU/DSU. It seems the ASA cannot load balance two outside interfaces so I seem to have to add a router between the ASA and both ISP connection...