Network Security

I wrote a rule with the intent of it firing upon events originating only from public ip addresses AND only for yellow OR red severity levels. However this rule still fires on green severity events. Can any one see why from looking at the rule in th...

I am trying to setup a host that accepts incomming traffic via its nat'd address, but when contacting other hosts on the internet uses the outgoing iterface ip address. I have the incomming NAT working but with the access rule etc, but I can not figu...

I have a pix firewall (515e) and a windows computer on the DMZ that has it's default DNS pointing to a server on the inside allowing connection to key computers on the inside. I need to connect to the internet from this DMZ computer as well on the ou...

I just upgraded my IOS to 12.4.11T and now I can't use SDM-2.34 to administer IPS anymore. Apparently it doesn't work with IPS 5. Can I just download IDM as a CCO user? I haven't been able to find it.Thanks!

We have an issue regarding DHCP for VPN-clients connecting to a ASA 7.2.We need to pass DHCP-options to the client - is it possible?We have tried specifying a DHCP-server in VPN "Tunnel Group" configuration but we only get IP-address from the DHCP-se...

We have PIX 515 with version 6.3(1).Most of the users use seperate proxy server for internet access. Some of them are allowed to access internet without proxy which is allowed through inside interface access-list. Some users who suppose to use intern...

Hi Glenn,I have problem with my two PIX 515, ver6.3(4).Both PIX have same HW.Both have UR license.The primary suddenly failover to secondary. Can't get any logg to the syslog server.(logging on, logging standby, logging trap debug)Somtimes the primar...

Hi,We have an ASA 5520 running in front of our web farm. We now have 5 public IP's that need to be forwarded to 1 internal IP, on the same port.Our network guys tell us this is not possible !? Any ideas ??Txs,Stefan

Hi all, can anyone tell me how the general firewall is setup, do most people use them inline with the network, or are they mainly used for NAT and have say an external ip on there. Could I have one internally on my network, with say 1 network subnet ...

Hello,I have a question about configuring an access list? Can you use computer names instead of ip addresses. We have a pix in front of our SQL servers and workstation PC's that need to access the SQL servers are assigned DHCP addresses.

hi,in the configurator, there is no option to add the ASA-SSM-AIP-10-K9 to the ASA5510-SSL250-K9. please advice if this is possible.Thanks,Elsy

I have an issue and was wondering if anyone had similar problems and what was done to resolve it.The basics: upgrading from 4.5.1r654 to 5.0r176 for ~28K hosts. Schedule the software upgrade, user gets it when on the network, goes home connects to h...

Hi Sir,Please refer to attached network diagram.Logically and functionally, there are two networks: Network 1 and Network 2. Core switches of both networks are co-located at each 3 core data centers. Both networks run EIGRP in the same AS 100.There's...