Network Security

I am doing a demo of an ASA to implelment as an SSL VPN solution, and am having a problem with the configuration. I have my users being Authenticated with RSA and Authorized with AD/LDAP. I am trying to set it up so that when they are Authorized via ...

We have a number of SDSL users (BT IP Stream)working from home.They connect from home to our network via a Draytek router.After power up of the router which has a user name and password it is given from our radius server an internal address of 10.180...

Hi Everyone,I currently have a PIX seperating a DMZ, Inside and Outside networks. I have a solution to implement where 2 servers are to be connected to the DMZ and 1 server connected to the internal LAN. Once connected, these servers cannot talk to e...

I just installed a PIX for remote access. During the day when there is outbound traffic from the LAN to the Internet, the VPN works fine. I can authenticate to the PIX and access resources inside the network. However, after hours when there has been ...

Hi all,I've found out that from version 12.4(6)T i cannot use the commands:eou clientless username XXXXXeou clientless password XXXXApparantly they have been discontinued ?But what is the alternative to get clientless hosts working in a NAC Environme...

Is anyone attempting this sort of configuration at their home? Do any configuration examples exist? I have two specific questions. I've tried PAP, CHAP, and MSCHAP on the PIX, but I can't get PPP to negotiate with the Verizon network; debuging info d...

I get connected to my ISP using PPPoA, but how do i configure it in the pix? If PPPoE, normally we using VPDN command, ip address Ifname pppoe, ip address outside pppoe. How about if PPPoA? is it possible to configure the pix to dial ADSL modem using...

I have to make tests on PIX 501 firewall. What I want to do is to find any holes and vulnerabilities and to hack into LAN it is protecting. I have to configure it and make a configuration that will be used for tests. Does anybody have any idea?Thanks...

Hello,What is the best approach in the following case:The ASA5510 with the AIP-SSM-10 is currently configured with a global policy to inspect traffic on all interfaces:class-map inspection_default match default-inspection-traffic!!policy-map global_p...

I would like to know how the Pix running version prior to 7.x process a packet with qos marking. I am pretty sure the pix will not honor the qos, but what it does to the packet, strip off the qos?, or ignore it?. The same with version 7.0 and how abo...

I can ping the local interface, but not the other two interfaces (Inside cannot ping DMZ, etc). Machines in each respective area cannot ping machines in any other area either.Here is my config, any help would be appreciated (config has non-relevant i...

I could ping internet website through the PIX(6.3) with internal IP,but only some IP could do this... I check my pix's configuration and find out there are no limits on inside interface(PIX aloow access from high security level interface to low secur...

I have a PIX 501 that I am setting up for our disaster recovery site. I have the inside config ready to go. I have set up translations to protect the inside addresses. I want to also set up a translation on the outside coming in. Is it possible to tr...