Network Security

wan--->1720---->pix---->dmz=10.200.0.0/16pix inside(10.50.0.0/16) to 36003600vlan 101 10.101.0.0/16vlan 120 10.120.0.0/16 access to dmz from wan working.not able to access the dmz from any inside network, do i need a no nat ? once i have a no nat if...

Hello all,i have plan to implement encryption between my h.o and branches. rt now its working with point to point leased lines.i have 5 branches. if i want to encrypt the traffic between h.o to branches is that ok if i put one 515E at H.o side and 50...

I am trying to connect to my ASA5520 via ssh but I always get access denied. I have added the user with the correct priv level, added the correct ip via the "device access" with the management interface specified. I also created the key. I can log in...

Hi,We got a few 515E sent far away recently. They were running 7.0(4) without any problems here, however once they arrived at their final destination two of them did not boot and stayed in reboot loop. It looks likeCISCO SYSTEMS PIX FIREWALLEmbedded ...

I am trying to get allow access from a Cisco VPN client into our DMZ (consultant needs to be able to remote in). I thought I had the config right but its still not working. Here is the pertinent config from my pix: The vpn segment is 192.168.9.Xacc...

HI,I?m trying to configure VPNs Remote Access in a ASA 7.2.2. However, they doesn?t work, so can anybody tell me, the following topics:What commands can I use to do thoubleshooting?. I use "debug crypto ipsec", "debug crypto sa",...but I don?t see no...

Hello Group.We have a ASA 5510 and are in the process of replacing a watchguard firewall on our network. We have the optional CSM and the ASA has 4 ports, 3 which are active. We have one port that is set up for the inside and would like to have the...

HiJust got my hands on two new asa5520's for the first time. I configured stateful failover/standby on G0/3 and it works fine. Now i wondered if i could have used the management interfaces instead. Anyone done this?colin

I have to implement a VPN with four routers every router has different configurations but the Primary router has only one interface connected to internet. When ever I try to implement more than one VPN on the same interface it gives me an error that ...

I have PIX515 and terminated 2 ISP's in interface Eth0 & Eth2I have created 2 IPSec tunnels already b/w local & remote office thro' Eth0 and are up.I wanted to create a tunnel b/w local & remote office on second interface Eth2 but the tunnel is not c...

I have cisco PIX 515E with failover.I need to configure & enable IPSEC with another router.please let me know the steps & procudure .Please find the attach config file.Regards,Moorthy.

Hi,One of our customer has 3 different ISPs and he's using the Public IPs provided by these different ISPs for his Public facing servers. Obviously, each ISP is providing the IP addresses from entirely different address space. Can the same setup be u...

Cisco IPS 4240, v5.1(3)S255VPN users of our client's organization are complaining that the Outlook connectivity to Exchange through VPN is getting frequently timed out. Even if they do connect, the connection simply hangs in the middle of transferrin...

What is the maximum concurrent NAT/PAT translation number on a PIX 535?The Firewall Service Module (FWSM) supports 256,000 concurrent NAT and 256,000 concurrent PAT translations. THX.

Hello, I Had to block All Skype Trafic in my network.I only have a Cisco PIX 515 (v 7.22 - ASDM 5.22), no router.I had seen there is a way to block skype with NBAR cisco's IOS router, but what about PIX ? I need to find a way to block this , Greats t...