Network Security

Hi,configured ASA for allowing ftp requests to my ftp server residing behind the ASA,problem is when a internet client is doing ftp to the ftp server, he can able to connect, but he can't able to transfer the files after few seconds i get a message d...

Hi,I am implementing ASA's with SSM modules and I wanted confirmation that they can inspect http and block embedded traffic such as Internet Radio from being tunnelled through HTTP.The Cisco documentation hints at this, but I would like confirmation....

Hi There,I have configured site-to-site VPN between PIX and Juniper FW; I am checking the VPN link status and it is showing as up when monitoring via ASDM, however I cannot ping or access to the remote site. I am already having 2 ACLs allowing traffi...

hi there,I have an ASA 5520 (IOS 7.1) installed on my network.We have patted the inside network to the outside interface,thru which i am able to acces my web based mails on yahoo and few other domains.The problem i am facing is,while sending or reply...

I can't figure out for the life of me what is going on. This has been happening several a day this week.Everything will be fine and all the sudden the ACT and NET lights go out and connection is dropped. I cannot log back into the firewall. The only ...

hello all,i have a problem with ebgp with md5 through pix7.1.as you know, to pass bgp with md5 traffic for the pix6.3, i should configure a special configuraiton. it's norandom sequence number at the static nat configuraiton.static (i,o) 1.1.1.1 1.1....

Hi all,I've configured an ASA5510 for vpn access both from the internet and from a wireless lan on the same device.However I've got two different crypto maps, each one applied to a different interface of the asa, and two tunnel groups for the two gro...

hiI want to block the all ports on my Firewall except 80 and 443.How can i do it ??Any link in this regards (Port Blocking)Thank and regards

A few days ago I upgraded my IOS from 12.4(6)T to 12.4(11)T1. I've not made any additional config changes other than implementing IPS v5. Since then I've noticed a change in reporting format (more detail) to the drop alerts (see attached syslog). In ...

Do I need to upgrade to 7.1 and then to 7.2 and can somone tell me what the file names are that I will need?thanks

hi all,I need to do the following:nat (inside) 1 0 0global (outside) 1 interfaceaccess-list External permit icmp any any echo-replyaccess-list External deny ip any any logaccess-list Internal permit tcp any any eq 23access-list Internal permit tcp an...

I have to update PIX IOS 6.3(4) to 6.3(5).Since I have PIX in my datacentre so how to update it than and what to keep in mind

When I use the ASDM interface to my ASA 5520 I get a message that it did not recognize the dns-guard command while parsing the running cfg. Is this a bug with ASDM? How do I tell if dns-guard is working? Thanks.

Hey all,We are in the process of slowly setting up our new appliance. We are messing around with allowing in bound connection for remote desktop. When we add the first one it works fine, but when we add the second one it says that port is already u...

Hi guys,I'm kinda new to pixes but a following situation has arisen:from our local network there was an incredible amount of connections started toward an Internet site which promptly decided it was an attempted attack and blocked all traffic from ou...