Network Security

Are there tools to automatically convert a PIX 6.3.3 config to a new ASA?

I have a 2801 connected to the Internet running the Firewall Feature Set. Version is 12.3(8r)T8. I keep getting log messages that the router has denied access from some random webservers from Port 80. We are running NAT Overload and when I show the N...

On a 525, in version 6.3, my understanding is that you cannot change an access-list per line as you can in 7.0 by line number.Is it acceptable practice, if you want to add a line in the middle of an access-list to just copy the existing ACL from the ...

Can you help with what seems to be a simple configuration issue?I am trying to get my static NAT to work from outside to inside.Cisco 506e v. 6.2(2)External address x.x.x.x nat'ted to internal address x.x.x.x for SMTP traffic.Internal address is mail...

Deny inbound icmp src inside:192.168.50.1 dst inside:10.100.107.24 (type 8, code 0)The 10.100.107 network is across the tunnel. When I attempt to access that network the tunnel comes up, but I can't get across.I do have 10 network on my side.

we are using DNS server on the internet, when this DNS goes down the PIX mem reach to 95%, what can i do to solve this problem.6.3(4) on the PIX

We have changed the configuration through the IDM on the local sensor. Now we have to re-import so CSM is synched up. The interface has changed substantially. Has anyone done this yet?

We recently added a failover 5520 with the ASA-SSM-20, which matches the primary ASA/IPS. My question is I just upgraded the primary IPS to 5.1(5)-E1. It went fine, except now the failover IPS is still on 5.0(2). How do I update the failover IPS to m...

I need some input on upgrading my existing CSA MC 5.0 to CSA 5.2 on a seperate server. If I do this will I have to reinstall all of the CSAs on my host servers? The documentation indicates use of migration tools...is that referring to the import/expo...

Hey guys.I have a typical dual FW-pair DMZ, with dual-homed servers on different Pvlans.Now, when I want to send traffic to the inside FW (a 6509-FWSM), we use two 4948's with static routes pointing to the FWSM virtual DMZ interface. The 4948 have L3...

We have a 5520 and just added a failover unit. I just upgraded the IPS to 5.1(5)-E1 on the primary, so when it reloaded, it failed-over to the secondary. Now I can't make the primary active again, nor can I login to the secondary. I get the user ID a...

I haven't finished my research, but this signature seems to trigger on the TXT queries used by SPF(http://www.openspf.org/). Anybody else run into this and were you able to resolve?