Network Security

Retiring subnet 172.16.24.x 255.255.252.0 in phases, moving devices to 172.17.24.0 255.255.252.0. Current phase - move Messaging server devices. Senior stating that currently proposed command set for move does not make sense in terms of subnet masks ...

I would like to access a dmz server with both public and private ip's from the inside. I can access private with static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.255and I can access by public with destination NAT static (dmz,inside) 64...

We bought a new PIX with 7.2(2),We are having issues configuring the IP address and telnet to the PIX from inside network.On the running configuration it shows ip address for the interface but the "show interface" shows "ip address unassigned".Please...

We have a mac filter on a port of a Cisco 3560. That port connects to the uplink port of a 4-port unmanaged switch. It works great.Today, a different 4-port switch was connected. I would expect that no traffic would pass since the mac address is wron...

I have a Pix 501 that is connected on the e0 interface to a Cisco 2950 switch. Been having some problems getting out with it from the internal network and when I do a show interface command on e0 it shows interface is up, line protocol is down. I've ...

I have a 3015 Concentrator and I am wondering how I will know when it exceeds its limts for bandwidth encryption and throughput to justify upgrading to a 3030 or SEP modules.

When I do a static NAT on the Pix:-static (inside,outside) 172.16.1.2 192.168.1.2 netmask 255.255.255.255I can see the inside IP address 192.168.1.2 is translated to 172.16.1.2 on the outside interface using the network sniffer. However if I introduc...

I want to authenticate my ipsec vpn client by using certificate. I am using asa5540 as ipsec vpn server. The first step I should do is create an trustpoint and authenticate it to ca. the trustpoint name is knasacawhen I execute the commandcrypto ca a...

I'm Having problems with RA vpn users authenticating with Vasco tokens on my new ASA 5510 platform. I,m migrating from PIX 6.3.4 to the ASA. In my PIX configuration I used the command:crypto map outside_map client token authentication ABCXYZ to let v...

Hi !I just have a couple of url to block, so I don't really want to implement a server like websense or N2H2 to manage the web content I want to block. Is there a way in the ASA-5505 to deny access to certain web pages with the url of the page ?

The detailed network diagram is attached. the default gateway of the inside servers is ASA 5520.PROBLEM:Traffic coming from XYZ Branch to the scorpio and alpha server when reach the server, they send back the packet to their gateway which is ASA 5520...

Hi,I have to audit a PIX 515 to meet the below requirements. Can anyone please let me know what the config would look like or point me to the relevant docos to make the PIX compliant.ThanksScottTCP Start Time Out must be set to 60 seconds.TCP Session...

Are there tools to automatically convert a PIX 6.3.3 config to a new ASA?