Network Security

When setting up the Stateful failover link, are there any issues if you use the management interface or should you only use an ethernet interface?

I have a pix with one static outside IP address and have been asked to forward a whole bunch of UDP and TCP to an internal (natted) IP address. I have done static mappings before but for only single port numbers. Below is the range of ports to forwar...

I have a PIX-506E set up locally and a PIX-506E set up at a Site 1. I can connect to Site 1 from my backup internet connection which isn't firewalled. When trying to connect to Site 1 through Local PIX I secure the communication tunnel.. but it will ...

Is there a way in the ASA to tell if it was started by a power up or by the reload command ? It doesn't show in the show version.Thanks

Hi, In cisco document http://cisco.com/en/US/customer/tech/tk648/tk362/technologies_tech_note09186a00807ca437.shtml#ios gives a table-2 showing the fixed version of PIX and ASA.Cisco PIX Platforms CSCse60554 Fixed in Version 6.3(6). Cisco Adaptive Se...

Cisco documentation indicates that PIX 6.3.6 will resolve daylight savings time issues. I don't believe PIX 6.3.6 is currently available for down load. Any ideas when 6.3.6 will be available?

we are new to the Cisco world, just set up our first ASA 5520 a couple weeks ago replacing another brand. Everything is fine except the internet connection seems to be slow. We tested outside the ASA and it was fine so it appears the ASA is the iss...

Hi,I have a Cisco 2801 router connected to the Internet running EasyVPN server and some site-to-site connections.Some of the clients from the EasyVPN server need to be able to 'use' the IP from the 2801 to access other servers in the public internet....

Can somebody give me a definitive answer preferably with a reference. On a PIX 525 E0 and E1 are clearly identified by markings on the chassis, however, if additional cards are added (i.e PIX-4FE-66 or PIX-1GE-66) how are the ports numbered? Do the...

Hello, we need to access our extranet DMZ remotely via VPN and are having some problems getting this to work.The endpoints of the vpn are two pixes - one of which has the extranet dmz residing on it (see attached diagram)The vpn is setup fine and can...

Hi people,I would like to know if it exist a command complement "show access-list" that it does not need to use a spacebar keyboard. My access-lists is big and all time I have see that to be using a keyboard to spacebar. Sorry my poor english.tha...

I am having a problem with a Cisco Pix 501 firewall.Iam trying to setup the inside address from 192.168.1.1 ( default ) to 10.10.0.200 and i'm receiving an error :the ip address does not match with DHCP pool.I use the web interface and the Hyper term...

Hi, this is my first time using this forum, so I hope this works. I am using the following:OS - Vista BusinessVPN Client - Cisco VPN Client v4.8.02.0010A number of my customers are getting the error "Secure VPN Connection terminated locally by the ...

Hi All, I am still new to firewall, I have CISCO PIX 515 firewall. My management asked me to block Yahoo mail, Hotmail, and other websites. Also the asked me many times to block MSN, Yahoo, AIM and other messengers.. How I can do that using pix firew...

I see one rule in my FWSM. Soure Dest Service DMZ any ip I don't understand clearly about service "ip". When I configure "service ip", what service DMZ will connect? You can give me example. Thank you very much