Network Security

Well, this is my first Pix experience, and after reading through the doc, I am still with some questions.In the network diagram I send you, have the pix outside interface (to DMZ) to be announced in a public DNS for me to have access to the internet,...

I'm trying to figure out how to select signatures. I suppose one could just watch the alert chatter and disable or delete signatures that seem too noisy. Doesn't seem very secure. I'd prefer to analyse the traffic that's triggering them, but if I ...

We have a client using an IWATSU phone systems with IP cards int it. The clients config is like this; (Remote Site) Phone Switch | Ethernet Switch | Cisco 2811 (VPN Tunnel) | INTERNET | Cis...

I see that version 4.2.6 was released today. I am unable to find any release notes as of yet. Anyone else see them, or am I missing something.With past history, I don't think I will be applying any upgrades without at least being able to see what C...

I have a temporary situation where I need to allow traffic where both tx and rx do not take the same path.Sometimes the originating traffic will go through the ASA, and sometime the return traffic will go through the ASA.Please don't tell me that I n...

If you run an ASA5505 in transparent mode, will a 10-user license restrict the firewall in any way?

How many concurrent h323 calls ASA5510-BUN-K9 can handle and the cps setup rate to make sure it does not impede the voice service during operation.

I like the ability to view and filter logs, with colour coding, in ASDM. Does anyone know of a similar (hopefully free) product which would do the same but allow you to load saved logs?Rather than configure syslogs I prefer to ftp the internal log bu...

Hi all !!!I'm using 6509 FWSM and wanted to know the command to monitor the port based violation (which are the unnecessary ips and port are trying to access certain interface).thks in advanced,regards,aryan

Hi,I have a pix 515E Unlimited that run on version 7.2. Customers connect to it via Cisco VPN Client. I have run into a problem that there is a limit of 15 radius groups in the OS.Does anyone know if it is possible to upgrade the license or in any ot...

I have the following access list configured on an interface running FWSM 3.1(1):access-list vlan123_xxx extended permit udp 10.16.78.0 255.255.255.192 host 10.214.90.52 eq ntpaccess-list vlan123_xxx extended permit udp 10.16.78.0 255.255.255.192 host...

I think this should be pretty straight forward, but am having am impossible time getting blocking to work. I have an IPS 4240 with software version 6 and have configured many login profiles to try to get my ASA to shun a host triggering a signature ...

I have configured our ASA with interface tracking for multiple ISPs. The failover works fine, but no host on the inside can access the Internet once the failover to ISP B happens due to NAT issues. Our primary ISP which I will call ISP A has a class ...

hello,what are the requirements of upgrading from 6.x to 7.x on a pix 515 e.is there any guidelines to follow? am afraid i might lost my activation key thigs like that..thats why i want to know the precautions too..thanks a lot..

Can anybody give me further information about cascading contexts other than what's on the documentation CD which is very little? Isn't a cascading context nothing but a shared interface? You're basically sharing context A's outside interface and cont...