Network Security

Hi all. Here's the scenario:PIX 515 v7.22 with 3 interfaces, Inside, Outside, DMZ. Inside=100, Outside=0, DMZ=98I need to put in a rule to allow a machine from the DMZ (let's say 192.168.100.25) to have access to one machine on the internal network (...

I have a customer with a PIX 525 currently doing allow all-exclude by exception and we need to change this!! Since they don't know who should or shouldn't be getting through, how do I capture source/destination traffic for all users to obtain this in...

Can I have to ports of the 5510 on the same inside subnet using two different IP's on that subnet? The two outside ports will be coming from two different locations, but need access to the same inside subnet. If this is possible another way please le...

Hi everyone,Is it possible to setup two crypto maps on the two interfaces on the same box?We want to migrate VPNs from ISP-A to B and setup the two ISP on separate interfaces. Question is can we configure two crypto maps on the same box and bind them...

Hi all,Can someone please tell if it is possible to do software IDS/IPS in the ASA55xx series or do I need to buy the AIP-SSM module to do so?Thanks,John

Dear All,i recently involved in one of the ASA 5520 firewall installation. We ordered the 2 firewall with limited 4 ports to support the client's exsiting 7 Networks.Now we have found the port shortage to support the said number of the interfaces (7)...

Hi, We have VPN setup through a Cisco 877w router. Everything works fine, we can share files, browse the Intranet pages but we cannot download files (.doc, .xls) from the page. The browser says folder or files not found. Those files can be accessed v...

Dear All,I need to solve the following issue asap.PIX inside network 192.168.2.0/24Server edirectory 192.168.2.10server proxy 192.168.2.9PIX outside net 10.10.2.0/24PIX outside int 10.10.2.1/24Static nated for edir svr 192.168.2.10 --10.10.2.10static...

I've inherited a PIX 501 firewall and want to change many of the settings used by the previous owners.I'm doing this in the CLI. The web based GUI gave me some problems (error messages about certificates and so forth). In fact, one of the things I'd ...

Clients on our LAN access websites using web proxy servers. One website (that is accessible from other LANs) does not work either through the proxy or directly.I can see conns (state table entries) between the clients and the site but no I flag to sh...

I have some users behind my FWSM who want to be able to initiate VPN using the Cisco VPN client to external locations.UDP and TCP are allowed outbound, and the FWSM obviously handles the return traffic. So the IKE tunnel establishes OK and authentica...

Hi,Have this issue that I need help with...I have 2 525Pix's running 6.3(5) in failover...The primary runs at a constant 60%-100% CPU usage and my inside and outside interfaces are running packet errors...When show proc the only process' that is high...

I already build 3 ASA clusters and have one more to do.The problem is that the last two ASAs can't build up there cluster relationship.Software:ASA = asa722-19-k8.binASDM = asdm-522.binI found out that the two ASAs have different show version outputs...

We have a pair of redundant 515e firewalls. A couple months ago users started complaining of slow performace between network segments. The common denominator seems to be segments seperated by the PIX's. We also discovered if we try to FTP files from ...