Network Security

Hi,has anybody tried to implement a NAT exemption and static NAT for the same source. What i want to achieve is that one host of the internal network will be not natted like the complete network and also has a static NAT for another connection.I have...

All-I am in a lab environment working on a project that, among others, includes Cisco's NAC product.We are responsible for providing basic network services, such as DHCP, WSUS, Anti-virus and Certificate Services. We have completely loaded and teste...

I have a 1841 router that is going to be an Internet facing router for a DR site.Normal operation is to have the main site VPN tunnel to the remote site.An IOS firewall policy blocking all access but throught the VPN tunnelIf the main site were to ha...

We had a firewall failure over the weekend which crippled a remote site. We have a VPN concentrator at another main site and we were wondering if we could use this for a "backup" tunnel for the remote site (the primary line is a tunnel to a separate ...

Hi everybody, i'm try to configure a pix 515. It has 5 eth ports. One of these is connected to our public ip, one other connected to out intranet. And that's ok we can use internet without problem.The problem rise when I configure one other port wit...

Well, we are using IDS 4235 off line with mirrored ports and executing acl on external router..I want to build a custom signature which will reset the tcp syn sessions if more than 10 or 12 from a single IP...can someone comment how it's gonna be wit...

Not something I've attempted before so perhaps somebody can shed some light.Have a PIX configured with static inside translations, so servers appear with a fixed IP address on external subnet.In addition to this I want to add a static outside transla...

Hi,I made the following test:One machine using VLAN2 with the ip address 1.1.1.1. The FWSM inside interface is using 1.1.1.2. The VLAN2is associated with the Firewall Module.If I create a loopback for management in the 6500 switch, for example 1.1.1....

How does an FWSM realize that an int is directly connected as there is no physical interface available.

Is it possible to configure a Pix 515E with two ports on the 'outside' and two ports on the 'inside' of a network and run OSPF at either side. Because the Pix would see the same network on both it's 'inside' ports with equal cost would it get confuse...

Hi Guys,I have a problem here with my setup.It is a simple one Internet <--> ADSL router <--> ASA <--> LANI have two lan interfaces both connected to my ASA. The problem is i have a FTP server residing inside my LAN. The users on the internet are no...

Hello, I have installed a FWSM 2.3(4) and when I change a policy for example and I intend to save the config, the PDM shows this error:"PDM received an error when one or more of the commands below were sent to the FWSM."Someone could help me please?T...

Hi, please advice,if we install a ASA5510-CSC10-K9, for a network of 35 pc and 2 servers, do we still need to install on each pc the trend micro anti virus or another anti virus application.

I am not sure if my VPN module is faulty, if it is causing the router to reload, I have enclosed the following logs.*Mar 1 00:00:22 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to upMar 12 03:20:16 GMT: %CRYPTO-4-REC...