Network Security

While trying to upgrade, I received a timeout error using the copy TFTP command. I am unable to ping any internal host on the LAN from the PIX and cannot ping from any internal host to the PIX. All internal hosts still get internet access. Attached i...

Hi folks,I cant't get up a h323 trunk to another IP system. I've tried it on a local network and it works fine. Once I try to set up this trunk through a PIX Firewall (version 6.3 (3)) it doesn't work. One IP system is translated to a public IP addre...

I have a customer that is using a utility to remote to desktops in his network. Most of the remote sites are over IPSEC tunnels, some are over a transparent lan. The administrator can use the utility on the local LAN and TLAN sites, but cannot use th...

PIX515 has the following isakmp policy.crypto isakmp identity addresscrypto isakmp enable outsidecrypto isakmp policy 20 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400crypto isakmp policy 30 authentication pre-share encrypti...

as shoown in the attached file diagramwe have multicast Application servers in inside all users in Lan1 & lan2 can connect to the multicast server i need to enable multicast on dmz & outside interface on pixwhat is the correct configuration you recom...

Hi all, I use Cisco VMS 2.3 to manage FWSM and IDSM. I install Cisco VMS 2.3 on Windows 2000 and I use 1 computer client (Windows 2000) to connect to Cisco VMS. Now, from Client computer, I connect: https://x.x.x.x:1742/login.html, I see the error :"...

My IPS is not reporting scanning alerts to either the console or syslog. IPS appears to be configured & working correctly. When I started using the router with the built-in signatures, alerts were seen on the console/syslog. Could the problem be with...

Hi Guys,I just want to know, we currently have a PIX solution with a passive failover box. With PIX you can license a box for passive failover only (the secondary costs less money). Is this also possible for ASA, or do you need 2 'fully licensed' mac...

ASA 5520Here is my situation, I have an internal FTP server that is NAT'd to address a.b.c.d for purposes of recieving FTP's from the outside world via a DNS entry for our domain. That same server I need to FTP out to a vendors site, here is the catc...

Hi!I need to use a firewall in order to protect a public network for accessing Internet. In my network, I have around 100-200 users and I want to allow them to use p2p software (like emule) although I would like to limit the bandwith and number of se...

We are experiencing poor network performance when connecting from hardware VPN sites. VPN sites have Cisco Hardware VPN client 3002 which terminates to Cisco 3005 VPN concentrator. Geting upload/download speeds of 355/484kbsp from VPN to surewest.com...

Hi all, I use Cisco VMS 2.1 and update to Cisco VMS 2.3 to manage IDSM (version 5) but now I see an error. I have a license of Cisco VMS 2.1 and when I update to Cisco VMS 2.3, I use the same license file but I see the error in Cisco VMS "Error about...

I need to migrate some customers from Checkpoint over Cisco Pix firewalls, NOT ASA.Currently in the checkpoint security policy, we onlyallow snmp version 2 and version 3 to traverse thefirewalls. Furthermore, we also allow only ssh version 2 from tra...

Not sure if this is the right forum for this questions. I have a vpn concentrator 3005 with it's private interface connected to a dmz interface on my pix. The public interface to a hub hanging off my router facing the internet.I have a vlan set-up on...