Network Security

Hello all, I am having an issue with one of our VPN's that was recently setup and I am seeing ICMP errors. When I send a simple ping test to the destination IP, I am seeing the following messages while running the debug log-viewer:208.x.x.x|Built ICM...

Hello,I have a softphone using SIP on port 5060. I check the PIX 501 (version 6.3(3), using show conn, but all I can see is the connection to the voice gateway on a different port (eg.29051). If I use the softphone on an internet connection without a...

Hi,We have a customer that is having problems with one specific client-server application. The app protocol looks kind of like HTTP on the wire, but isn't. The server is on the Internet, and the client is behind the 'inside' interface. Whenever th...

Hello,My client has a ASA5520 with a SSM IPS module. I never worked with the IPS module and have been asked to set this up. I upgraded the IPS to 6.0x and IPS signatures (S266), but I do not see any alerts or blocks from the IPS. I have run NMAP s...

Hi,Is there any option that I can get the output of show connection to syslog server.

I've upload a new flash image to my ASA and can see it when doing a "Sh Flash" command.However, we rebooting it is not used. What is the proper procedure to get it to use an image file?Would I use...boot system flash:/asa722-k8.binWe are currently ...

We are running an ASA5520 on 7.2 (2) code and are experiencing underruns/overruns on all 3 of our firewall interfaces. The speed and duplex settings are correct and there are no collisions, input or output errors. Below are the interface definition...

Hello,We must used the feature DNS rewrite with pix 515E os 7.2.2 but it doesn't work.I just use this static rule :static (inside,CAG) 172.21.250.1 170.250.249.8 netmask 255.255.255.255 dnswhen i'm connected to dmz cag i make a dns request to dns ser...

Hi,i need alittle help with my PIx 515. we have a bunch of current acl's for a segment of our network and i need to put one in with a range of udp ports. i cant figure this one out, even looking at the command sequence. i have many with one port o...

Hi all,We have gone through tremendous growth with RA VPN clients and decided that SSL VPN will be a better solution for us.So we started looking and are testing two vendors, Juniper and Aventail. While their products deliver what they promise, I sta...

I have a Cisco 1811 router that will be terminating an ISP connection. There will be no VPN tunnel configured. Is it possible to configure one static NAT translation that will be plugged into the switch ports on the 1811 and the other devices plug...

I just installed a 525 at a remote site. I made sure I had a good host name and FQDN in the config. I generated the RSA key pair. SSH statements are there as well allowing access to the inside interface. I was then able to SSH into the box via an...

Hi, My name is Zab and my issue is that my firewall (PIX 520) on startup asks for floppy to boot. Since I have no such floppy disk how will I change the boot option so that it can boot without a floppy on its own?

Hey guys. I'm looking for a new router security appliance. I would like it to be able to tell me how much bandwidth is being transfered over the wan and lan both for in and out. Like good logging/reporting feature. So if you download say 6gb from the...