Network Security

hi all,recently my company has developed network with GRE Tunnel. But when I try to add qos feature using class based weighted fair queue, the router refuse and tell that CBWFQ is not supported in interface tunnel. is there a way for interface tunnel...

Hi, i wanted to block the web based google chat, is that possible by blocking some ports on the routers? i know it works through proxy server, which i have already implemented on my network,by specifying the google web chat location. since in Cisco I...

Hi all, I have an interface: operation (address network: 10.10.10.0/24). Now, at FWSM: I have 2 rule for Operation network: 1. access-list acl_mdc_operation_nat0 extended permit ip 10.10.10.0 255.255.255.0 any 2. access-list acl_mdc_operation_access ...

I have set of Global IP range and only 3 IPs are used. why internal host are getting Global IPs while there are no rules for publishing them to Global.Using Cisco PIX 515e

Hi, I have T1 with a class C that is subnetted into two for Outside and DMZ network with Inside using private IP address. My question is how do I configure the DMZ to use the public address without NATing to the Outside IP address. All the config sam...

I have a 2821 connected to Roadrunner, on the private lan we are using checkpoint vpn client & Watchguard vpn client to connect to the outside wan at our other corporate server. This is where I am missing it. What would need to be configured to allow...

Hello,Is there any way to encrypt syslog/snmp traps from a Cisco IOS device over the internet. I know I can create a IPsec VPN from the router itself to a remote firewall, but I do not want to take this route. Is there an inherant IOS feature to encr...

Hi what do u reccommend a pix 535 or asa 5550. Currently have pix525 but need more through put ?

I'm trying to understand the "cleartext throughput" term that Cisco uses in their performance specifications of the PIX-525. The PIX can be expanded to up to three gig-ethernet interfaces but it is listed as being capable of handling only up to 330Mb...

Well, have very very limited experience with ASA and PIX. My new job here as an ASA appliance and I am going to be taking over the duties for it. Which is fine and great and I look forward to it. I am just a little "raw" and need some help.I will be ...

I?m using CISCO VPN Client 4.8.01.0300 with ASA5520 7.2. The connection it is closed by the appliance after 9.40 minutes if I?m not working with the notebook. I?m trying to increase the timeout or disable it completely. In the group policy for the us...

Hello,I have a problem with a 501 firmware 6.3I need to allow my internal users to access a vpn in the US we are in the UK. Everytime my users try to access the US VPN it failes on reply from the US. I have read the cisco docs which tell me to do a f...

Hi guys,I experienced an issue when I configured zone tansfer between 2 dns servers at internal and external zones. The PIX version is 6.1(5). I believe all the ports (TCP and UDP)are opened. Actually, from internal DNS server, I could query the exte...

Hi guys.When i tried to add an user to the device, i received the following error:An error has ocurred while attemping to perform the operationUnable to set user name (Not writable error)And when i try to add a new group i received the following erro...

I would need help on how i can trace and capture traffic on the above firewall.i need to prove to my IS guys that the firewall has no problems.