Network Security

I have run into this a couple of times: I am continuously setting up new pixes for a site-to-site VPN. (All remote sites connect to a PIX 525 at the central site). I'm using network management extensions and a RADIUS server. What happens is the VPN d...

We recently added a number of VPNs (site to site) to our PIX 525. We would like to benchmark both the processor and memory on the PIX to determine any possible impact. Now I know that the PDM can do some limited benchmarking. I'm looking for some sof...

I would be grateful if anyone can enlighten me with regards to placing a server with a public IP within a DMZ on a PIX.I am relatively familar with static translations, those mapping public IPs to internal hosts but I have never had a host within a D...

is this a valid static PATaccess-list permit 100 tcp any host 10.1.1.1static(in,out) tcp 10.1.1.1 80 10.2.2.2 80access-list permit 100 tcp any host 10.1.1.1static(in,out) tcp 10.1.1.1 53 10.2.2.3 53

I use UltraVNC with a repeater for remote PC support, and the repeater is running on the DMZ of PIX with the viewer typically on the inside interface of the PIX. The server can be any host on the Internet that I support. The problem is that the sessi...

Please excuse my ignorance but I have a problem with a PIX 525 (failover) that I just cannot figure out.The outside interface has an address with a /27 mask. I am using a few statics to NAT inbound connections(for FTP use, etc). And the global I am u...

I have the following problem:I have a vpn that I need to set up with a remote office. The purpouse of this VPN is to be able to support the servers and PCs at the remote office, so the main office needs access to the whole IP range (ie. 192.168.0.0 2...

I have a 4235 with 4.1 I am trying to upgrade with IPS-K9-maj-5.0-1e-S149.rpm.pkg the sensor does it's reboot but in the end it just hangs on "uncompressing Linux....ok, booting the kernel" any idea why it stops there.

I am trying to map two external global IP's to a single internal IP using a Static NAT and get "duplicate of existing static" error message. I am migrating two servers each pointed to with a different global IP address to a single server while preser...

I am trying to change IP address of the inside intreface and here is the message that I am receiving. I tried changing the DHCP pool first without success. BOSS(config)# ip address inside 192.168.3.1 255.255.255.0Interface address is not on same subn...

Hello,How are people setting up the management port's IP on the ASA5510?? It won't allow it to be on the same subnet as the other ports. Our network uses 192.168.1/0 and a subnet of 255.255.254.0. Are people just adding the management ports subnet as...

We are managing these devices using HP OpenView Network Node Manager (Ver. 7.5) on HP-UX platform.What are the known problems, limitations on its initial discovery and on later stages of managing the same ?

Hi allI am searching for a solution to analyse the traffic flows which go trough the ASA appliance. The informations which I want to gain are:- which kind of traffic exists (protocols)- destinations/sources- amount of packets/bytes- bandwith usage pe...