Network Security

Hi,I have a pi 515 , and the next hop to it is an internet router.I have the below statements as part of the nat:---------------------------global (outside) 1 61.8.146.97nat (inside) 1 192.168.44.0 255.255.255.0 0 0---------------------------When i t...

Hi There,If I did the follwing configuration:static (inside,dmz) 10.1.1.255 10.1.1.255 net 255.255.255.255Where 10.1.1.0/24 is my inside network and I configured an access-list allowing all the traffic from the DMZ to the inside network. Will the ASA...

I have a problem with ip inspect on a C 827 router. When i want make a connection to outbound it can not make a session with ip inspect firewall. When is use the command sh ip inspect session i don`t see details. If i disable access-list then everyth...

Hi all. I have small problem I need help to figure outI have a Global statement:global (outside) 2 1.1.1.10 netmask 255.255.255.240And my nat statement is:nat (dmz2) 2 0.0.0.0 0.0.0.0 0 0Now, I have a host inside DMZ2 that wants to talk to my PIX's o...

After creating a new vlan with conf:interface Vlan56nameif xyzsecurity-level 71ip address 10.80.207.1 255.255.255.0ospf cost 10Am not able to ping on to this int and the int status is showing down even after giving no shut command.What is blocking?

hi all can someone pls tell me or guide me as to how to use the established command in pix or asa. i know that this established command works differently than the established command in the ios routers. here once a outbound connection has been made b...

Is it possible to perform the TCP Load Distribution function (available in Routers) via Pix 515 Firewall?Mansoor

hows the going lads,We are about to purchase a new ASA 5505 but it will be behind a netopia DSL router . The netopia will be put into bridge mode and the vpdn configuration will be applied to the ASA.However I have read that the VPDN commands has bee...

As you are all aware, by default the 'inspect sqlnet' feature is switched on under the global policy map on PIX v7 firewalls. I would like to keep the 'inspect sqlnet' feature on at the global policy level, but turn it off for traffic travelling betw...

Hi Following is message with show conn in the pix525,ver 7.0. x.x.x.x is email server ip address. I don't think have 4g email send out in that time. How to understand this message? that source ip address is changed as time."TCP out 62.37.236.x:25 in ...

Hi there, I have an ASA 5510 version 7.0(4). I have a problem with the nat0 , at some point of time my nat0 line on the inside interface simply dissappears . When i try to add it again it gives me an error ERROR: access-list has protocol or port . No...

I was wondering if the AIP-SSM module on a ASA 5510 or 5540 can authenticate users against a Tacacs+ server? If so can you configure it so you can use ssh to login on to the device with authentication through Tacacs+?I have my ASA set up so I can ssh...