Network Security

Hello,I am attaching my ASA-5510 configuration.and also debuging crypto error.My problem is when I saw the "debug cry ike sa" then its showing me mm_active.but when I go to ping from my PC its going requested timed out. and Trace route is also not wo...

Hi,I have a need to use one interface on my PIX 525 (version 7.2(2)) as a logical interface so that I can use NAT to reference local non-routable DMZ IP addresses into ospf advertised IP addresses. I?ve connected PIX ethernet 4 into my Cisco 6500 swi...

Hi I am Hemant, We have pix 506e firewall, D-link ADSL dsl-502t and my IBM xseries 236 server. I have fix static live ip 59.181.103.220 which i have got ISP (MTNL), and the same ip is given in fqdn in http://www.net4india.com (a company from where we...

Hi,Execuse me. I have a deployed FWSM with 2 contexts. The inside is a shared interface and the outside interfaces are unique interfaces. On the shared interface I used identity static translation in the two contexts. Now the traffic cannot go throug...

What's the procedure to enable all the featureds of 6513 say FWSM, IDSM, MSFC in one 6513.

I have pix 525 6.3(5) in FO config.i have 4 int. inside,outside,dmz1 & dmz2 with a cable based FO.when i issue show failover command it shows ouside, dmz1 & dmz2 interface as Normal on both Active & standby unit.But on the inside interface it shows N...

I install two ASA5540 with IPS modules. One is active and the other is stanby. Some users complain that gmail users can not send mail to us. I have try with my gmail account and some time is not comming thru and some time is fine. Any ideas?

If the PIX has it's inside interface on it's own subnet, uplinked to 4503 switch (10.10.10.0), and the workstations and servers are on different subnets (10.10.20.0, 10.10.30.0), and using the switch as their default gateway, how do you set up the NA...

Is it possible to change the mac address of the outside interface of a pix firewall (e.g PIX 506E) running 6.3(5)?Background: My ISP bound the MAC address of my other firewall (SMC) when offering the DHCP lease. As a result, when I plug the PIX I am ...

I have a 506E that is used to seperate an internal lan segment from another lan segment (it is a police department). The problem i am having is we set up a second domain controller on the other side of the pix and need to open it up to allow dns traf...

Greetings,Users on remote network behind Cisco 2821 reporting dropped connections to mail server behind ASA. 20-seconds later, the connections get re-established. I run a constant "ping" to the remote LAN and do not see a drop over the tunnel.Any ide...

Hello,I have done some research looking around the forum, docs and could not find any details whether a static route could be added onto 4215 sensor besides the default gateway.Is that feature not supported? Has anyone ran into similar issue?Thanks,

We have an ASA 5510 with AIP-SSM10 and will be migrating 515E ruleset in the future. For right now I want to use the ASA behind the PIX as a bridge in order to use the IPS functionality. Would tranparent mode with access lists that allow all traffic ...

Hi Everyone,I have a new ISDM-2 Module (Version 6.0(1)E1) and I?m thinking use Inline VLAN Pairs to bridge two vlans, in my case vlan 100 and vlan 101. Vlan 100 is the vlan used by MSFC and Vlan 101 is the vlan used by the outside of my FWSM . In thi...