Network Security

crypto identity - this command does not work in any configuration.who has an example that was fully tested - the TAC example does not work and is the opposite of the command reference. the syntax is not clear, rarely the IOS accepts the DN with comma...

hello expertsi am in the middle of a serious problem and have to decide on one that is to use policy nat or static nat.all i want to know is which one is a better option to use if considering that fact that there will be really high volume of traffic...

Hi,I have a pi 515 , and the next hop to it is an internet router.I have the below statements as part of the nat:---------------------------global (outside) 1 61.8.146.97nat (inside) 1 192.168.44.0 255.255.255.0 0 0---------------------------When i t...

Hi There,If I did the follwing configuration:static (inside,dmz) 10.1.1.255 10.1.1.255 net 255.255.255.255Where 10.1.1.0/24 is my inside network and I configured an access-list allowing all the traffic from the DMZ to the inside network. Will the ASA...

I have a problem with ip inspect on a C 827 router. When i want make a connection to outbound it can not make a session with ip inspect firewall. When is use the command sh ip inspect session i don`t see details. If i disable access-list then everyth...

Hi all. I have small problem I need help to figure outI have a Global statement:global (outside) 2 1.1.1.10 netmask 255.255.255.240And my nat statement is:nat (dmz2) 2 0.0.0.0 0.0.0.0 0 0Now, I have a host inside DMZ2 that wants to talk to my PIX's o...

After creating a new vlan with conf:interface Vlan56nameif xyzsecurity-level 71ip address 10.80.207.1 255.255.255.0ospf cost 10Am not able to ping on to this int and the int status is showing down even after giving no shut command.What is blocking?

hi all can someone pls tell me or guide me as to how to use the established command in pix or asa. i know that this established command works differently than the established command in the ios routers. here once a outbound connection has been made b...

Is it possible to perform the TCP Load Distribution function (available in Routers) via Pix 515 Firewall?Mansoor

hows the going lads,We are about to purchase a new ASA 5505 but it will be behind a netopia DSL router . The netopia will be put into bridge mode and the vpdn configuration will be applied to the ASA.However I have read that the VPDN commands has bee...

As you are all aware, by default the 'inspect sqlnet' feature is switched on under the global policy map on PIX v7 firewalls. I would like to keep the 'inspect sqlnet' feature on at the global policy level, but turn it off for traffic travelling betw...

Hi Following is message with show conn in the pix525,ver 7.0. x.x.x.x is email server ip address. I don't think have 4g email send out in that time. How to understand this message? that source ip address is changed as time."TCP out 62.37.236.x:25 in ...