Network Security

Hello,Having issues after PIX 7.2 upgrade from 6.3I have an outbound (secure to less secure) destination static NAT in place, which works fine, but because of this NAT, I can no longer route through using real-IP destination address.EX.static (outsid...

I am experiencing intermittant FTP through an ASA 5500 running 7.2(2). Has anyone seen this issue or heard of it. no changes are being made to the firewall access-list during this time. Counters on the ACLs only go up occasionally when FTP is working...

Good Day, To check the maintainance mode version, I have to boot into the maintainance partition of the FWSM. Will this reload my FWSM or hamper the production N/w? Is there any other way to check the maintainance mode version ? Thanks Gagan

I'm trying to find out how to setup to using non standard tcp port on PIX. For example, I'd like to setup SMTP and POP3 access for users who are coming from outside. Instead of using port 25 and 110, I'd like to use non standard port for security p...

Greetings,Our DMZ port on our ASA is configured more as an external/Internet facing interface. It is configured with a non-routable IP subnet 172.20.2.0/29)that's configured to route specific traffic to a set of VPN routers (non company owned). Using...

I'm seeing lots of SMB Authorization Failure events being reported to MARS from IPS signature 5606/0. I strongly suspect that these events are false but I don't know a lot about SMB. The Event Type Details in MARS states "This signature detects when ...

I have never allowed my internal users to access web based front end servers in my DMZ but it seems a lot of companies are doing this now. So the question is:Is it standard proceedure to allow internal users to access DMZ servers?

Hi, I have a Cisco 1841 providing internet access with FW and NAT.The customer has an Exchange server on the internal network. When they send emails with attachments over 15Mbs in size they fail. Emails with attachments under this size are fine.They ...

We have a DACS unit made by an Asian Telecom company whose E-Net port is not user-configurable. Always does 10/100 auto-negotiate. Dozens are installed and working fine. We have two that are tied to two seperate 2950's using IOS v12.1 and after 48...

I need to double check if my thinking is correct regarding this.I plan to migrate my firewalling from a Pix525 to a FWSM. Both these are operational today the Pix is serving client dynamic PAT, VPN termination and incoming server access and the FWSM ...

Whenever I create a VLAN and I assign a static mac address to it, the static mac address appears in ports not assigned to a vlan , interestingly, the static mac address does not appear in vlan 1, the management vlan.What may be the problem?

I have a catalyst 6500 switch on my network and I know it supports an IDS module.What I am not sure is an IPS.Could somebody who knows be kind enough to tell me if there is the support of IPS in the Catalyst 6500 switch.

HI. I have a PIX 525 and I need to configure it like a VPN server. Anybody can help me? Anybody knows a url with that steps? Thanks