Network Security

This morning I was troubleshooting a VPN issue that I have been having with my SOHO connecting to a remote site. My SOHO is connected as follows:ISP (Verizon DSL) <--> WESTELL Modem <--> PIX 501 <--> LAN <--> PCIn order to determine if my PIX 501 fir...

I have couple of external IP addresses x.x.x.61 and x.x.x.69. I use the x.x.x.69 for NAT. My mail server (192.168.y.20:25) sits behind the firewall and is mapped to the external address x.x.x.61:25. There is no issue with incomming mail. The probl...

i wish to replace a cisco pix 525 please can someone give me a reccommendation of the next best thing. I have a company with a 1000 users

Could someone advice me on upgrade process for a set of 515E PIXes firwall code and pdm version upgrades.I will be upgrading a set of pixes in a failover configuration, I have read the upgrade process for failover firewalls and seems fearly straight ...

Hi,I tried to lab the doc. published by Cisco on tracing route across ASA 7.2, but couldn't make it working. ICMP is working fine, I guess it is helpful to ensure reachability and nat translation.Your help is appreciated.The attached text file shows ...

Is there a way to adjust the anti-replay window on the Cisco 3005 Concentrator?

Hi,Is it possible to config the outside interface, to receive an ip address from the isp. We have tiscali as ISP and they only allow dhcp.The version of fwsm is: 3.1.3

HiI have apix 515 firewall, that occassionally stops new connections being established from the internal zone to the external zone (i.e internet). So for example I may no konger be able to browse websites.I have found that if I run the "clear xlate" ...

what is the upgradation procedure of installing 6.0 from 4.1(5) on IDS 4215 and IDSM-2 ?does it requires a fresh installation or upgradation path?

I got this message now:+------------------------------------------------------------------------------+| System BIOS Configuration, (C) 2000 General Software, Inc. |+---------------------------------------+--------------------------...

Hi, I would like to know something more about using agentless NAC. We want to use Clean Access Server, but mainly to avoid MAC Spoofing. We think that CAS host scanning engine can help us through. Is it possible to configure CAS to scan ports, so if ...

We have an AS400 that FTPs files outbound. When it is behind a PIX it works great. However, after migrating to an ASA, the transmissions start working and then fail. Has anyone had a problem like this? An extra piece to this is that without the "stri...

hi I have a problemm i have a asa 5510 box running 7.2 ios. now asa has inspect configured for FTP on 21. Now the problem is that whether in active mode or pasv mode everything wrks fine like i can dwnload and brws the directory. now when i try ...

Hi - Is there any referance to what might be considered common network security best practices - specific to which ports/protocols to allow or block from the internet. I've been checking cert, sans, cisco - but unable to find any reference. I know su...