Network Security

I am running Pix version 6.2(2) and I am switching ISP's and need to know all of the changes needed to do this. We have one internal network server running and managing the internal IP's for the network. The PIX has an internal IP number assigned tha...

Hi All,I need an explaination as to why on some Pix firewalls, running exactly the samecode, the activation key showed up as4-tuples while other firewalls showed upas 5-tuples. I opened a TAC case with Cisco but I am getting evasive answer from Cisc...

Hi all, I use Catalyst 6513 + FWSM. Now, I want to configure how I can telnet to FWSM. When I connect to Catalyst6513, I use command "session slot 1 process 1" to connect to FWSM. Now I want I can telnet to FWSM, please guide me steps to configure? I...

Hello - I have a Windows Media Server on my DMZ. What i am trying to do is have the WMS server communicate with my SQL server on my inside network and vice versa and for some reason i can't get to WMS server from the inside. can you please look at ...

I am trying to forward a range of ports ex. 1024-2048 to (1) internal address using statics? Is there an easy way?

I am thinking of configuring an ASA as an Edge Device for+ Content Filtering with SmartFilter+ Inspecting Mail and General Traffic with the CSC Module+ terminate RA VPN (AES)+ and using the statefull firewall featuresWhat i am a bit concerned about i...

Hello,on a Cisco 836 CBAC is enabled on the inside Eth0 interface for incomming traffic. If on the outside interface BRI0 for ISP connection used all incomming ip traffic is blocked for returning traffic from initiated inside.Is CBAC working with dy...

Hi,I've recently upgraded my pix 525 from 6.3 to 7.2. Now I need to take a spare interface (ethernet4) enable this interface and create sub interfaces to use to communicate to my inside network by mapping to inside vlans.In 6.3, I would do the follow...

I am trying to set up static single (1) and range (2) port forwarding on PIX 506E device using the following commands; however it is not working. What am I missing?Single Port Forwarding 1. static (inside,outside) tcp 24.172.x.x 5631 192.168.1.215 5...

Hi Guys,Picture the scene, customer has two ASA5510-BUN-K9. They do not have Security Plus license that is required for A/A HA.In order to enable this, is it simply a software upgrade or is another license required? Seems like a daft question but it'...

According to Bryan from Cisco System TAC:Step 1: Launch ASDMStep 2: Click on the Configuration button at the top of the pageStep 3: Click on the Security Policy button on the left.Step 4: Click on the Service Policy Rules TabStep 5: If you don't have...

Linux_FTP_Server---(DMZ)Pix(ExTERNAL)---Linux_FTP_clientPix is running version 7.2(2). DB has priority of 70. EXTERNAL has priority of 0.Pix DB interface IP is 10.102.160.19/28Pix EXTERNAL interface IP is 192.168.1.4/24Linux_FTP_Server is 10.102.16...

i need to config ipsec site-site vpn betweent cisco 3745 router and watchguard firebox700.after configuration, i check the phaseI between 3745 and firebox700 already setting up,C3745 gives log below:Feb 25 2007 08:25:29: %CRYPTO-6-IKMP_MODE_FAILURE: ...