Network Security

New to the ASA series. I am installing a 5505 later today. Company has two buildings connected via fiber. ASA will go behind the router and into a switch connecting the two. Main goal is to protect an iSeries webserver on their internal network. Insi...

Hi,We have 2 FWSMs [versions: FWSM1: 2.3(4) & FWSM2: 2.3(3)] in C6509 chassis [with IOS version 12.2(18)SXF4]We have 10Gbps link towards ISP and we would like to use full bandwidth with the 2 FWSMs.FWSM1 is the main firewall have one inside and one I...

Hi,I have 2 PIX firewall in failover mode.When I issue Show failover command ,I getting the following message,ROKO# sh failoverFailover OnCable status: Other side powered offReconnect timeout 0:00:00Poll frequency 15 secondsLast Failover at: 16:43:57...

HiHow i can forward public_IP:81 traffic to inside 192.168.0.1:81 network. please advise and help me

HiI need your help to configure PIX for port forwarding. public_IP:81 port should be forwarded to 192.168.0.1:81 inside network. please help me out.RegardsIsrar

I wanted to post here to make sure that I am getting this right. I have a Pix 501 right now and want to replace it with a ASA5510 that includes the anti-X option. If I am reading this right I am wanting this model: ASA5510-CSC10-K9. It includes 500 u...

I am at a Customer Site. We need to have our PIX 515 ship some traffic that will originate from connected VPN clients to some inside networks.The networks that we need to reach are:10.224.164.0.2410.224.165.0/24.This is the configured routes on the P...

When configuring a PIX 515e with latest software for active/active functionality, do I need to have my interface on the second context setup on a different VLAN(subnet)...or can I just use the same VLAN and use a unique IP?thanks

Hi everyone,I'm having an odd problem with setting up CIFS in the ASA WebVPN. It works fine with a windows share but not with a samba share. Attached are debug logs from the asa on multiple fronts: debug aaa authentication enabled at level 1debug ntd...

Hi In the PIX525 ver 7.01, show service-policy: "Inspect: http, packet 2219985030, drop 0, reset-drop 0", is packet for inbound only or for both inbound and outbound? Is it for all http traffic in the outside interface? Thanksben

Is it possible to have ip Inspect, IPS(with SSM) and QOS on the same global Policy and have them all work at the same time? It seems from what I have read I can have multiple matches to the global policy, however the ADSM doesn't seem to be able to s...

Is there a signature that detects login failures where you can set a threshold for like 3 logins failures and if this is attained, someone will be alerted?Seems pretty common, right?Thanks

About 1/2 the PCs in my company should not have the ability to browse. I want them to be able to run windows update. Google gave me lots to look at. But, I can't find a list of IPs complete enought to work. I figure someone (many someones) must have ...

Hi,I have set up a site to site vpn and i have a problem where return traffic is not hitting the access-list on the return journey. The access list is confgiured with the correct range. Has anyone come across this?CheersKev