Network Security

I do have pix firewalls deployed across my network. a sample site is attached in diagram. since i am new to pix world, with less knowledge, please advice me how to allow my users behind 10.2.0.0 subnet to connect to their own corporate vpns. some of...

How is possible to filter some routers from another routers , in the inside interface , if I have set OSPF in that interface . Distribute-list is not able to use ....And , the reverse route rejection is not functioning . I enable DPD and Reverse-rout...

Hello all. I am totally blown away. I have a PIX515 and Cisco tech support person says I cannot host my own DNS, WEB and mail servers off the same inside or DMZ interface and have the lan users access these via their public dns hostnames? Original is...

Hi all,can do PIX in version. 7.x something likepolicy based routing like routers do.If it is not possible can I do it withsomething other (I don t mean other external device but other configuration commands different from routers).BRjl

Hi,I have a customer who has an Internet Domain (say 'mydomain.com'), and another internal domain (say 'mylocaldomain.com'). A single mail server downloads the mails from mydomain.com, working through the ASA5510. mydomain.com is being used to exchan...

recently i have seen a debug output from cisco PIX 525 (IOS 6.3) of very large traffic with an ICMP echo-request to a single dest address sourced from some addresses from the same subnet. -source addresses are from the same subnet of 10.x.1.0/24(s...

Hi,I need to perform DST command ?clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00? (Refer to http://cisco.com/en/US/customer/tech/tk648/tk362/technologies_tech_note09186a00807ca437.shtml#pixos) to my PIX525 failover environment. I want ...

A few days ago I upgraded to IOS 12.4(11)T1.implementing IPS V5. I'm receiving the following error messages:Feb 19 10:22:15.231 Brisban: %IPS-4-SDF_LOAD_FAILED: failed to open SDF from flash:/ips5/Mars-sigdef-delta.xml (File not found)Feb 19 10:22:15...

The IPS Active Update bulletins appear to be for sensors, ASA and IDSM. Can someone advise if they also apply to IOS IPSv5 updates or are these to be found else where?Regards

I would like some input on the best way to write a custom signature to detect WOW players on the network. I have created one based on TCP 3724 but am getting many false positives.

I'd like to know how can I configure a ACL to permit the isis routing protocol?In the acl there is no ISIS like OSPF

I am trying to setup a CCA CAM server, but the initial web page which instructs to install the license file isn't working. Has anyone else had trouble installing licenses on these machines? If so, any tips would be greatly appreciated.Thanks

Traffic allowed by acl is being denied, with the source port showing what the dest port should be. Here is the relevant acl line:access-list acl-cpt line 17 extended permit tcp 192.29.152.0 255.255.255.0 host 192.168.52.2 eq smtp (hitcnt=2)Here is th...