Network Security

HiI have a pix 515, and I'd like to log all traffic that goes through. The aim of my exercise is to see which servers are making https requests to a site with IP a.b.c.d. Currently I have the following config:logging onlogging timestamplogging conso...

All,Is there any an easy way of viewing or limiting debug output on a busy firewall?For example, if i enable logging of debug information to a telnet session i also end up seeing all the messages from information, notifications, warnings etc. When al...

HI friends, i have been upgraded a 4215 sensor form 5.1.3 to version 6 after the upgrade, i configured the signature to block host like in version 5 but i can?t see any host in teh active host block list.I know the configuration change so much, but c...

we have setup with wism and ACS and the authentication will be done using external data base AD . my question is :- if i have 2 SSID let say test1 and test2 and we have 2 group of employee let say empolyee1 and employee2 and i want employee1 access t...

Hi,Currently WS-SVC-FWM-1 (FWSM)is installed in 6509.But now we are considering to place another FWSM for redundancy.I could not see WS-SVC-FWM-1 in the dynamic config tool.Can WS-SVC-FWM-1-K9 works with WS-SVC-FWM-1 as active/failover.Is there any c...

Hope you guys can help; I'll start by outlining the current situation.We have a small site in Malaysia (KL) that has a vpn 3000 concentrator. This has a single ipsec lan-to-lan tunnel with our head office in the US. All traffic goes over this tunnel,...

Hi,i have a pix 515e with the following configDMZ Exhange server and a web serverInternal a lot of servers and workstation. When i try to browse the network i cannot see the server in the DMZ. People cannot connect to the exchange server with webmai...

Hi,Anyone can help what are the Pros and Cons of Cable Based Active/Active Failover over LAN-Based?Also, why there is a need for switch in the LAN Based Failover? Isnt it a point of failure as well? Why can't a cross cable be used?Lastly, How fast is...

Help! I have 2 877 routers connected using site to site vpn over adsl links. Everything seems to work fine (ping/telnet etc) except remote desktop will not establish a connection back to the main site and the 2003 Terminal server. There are no firewa...

I have a PIX 501 behind a comcast business gateway with a static IP address. Hooked up a web server on the internal LAN and trying to allow outside access to the web server.Internal network is able to access the internet. VPN access to the internal n...

Hi,I'm looking towards procuring some ASA55xx as firewall for a datacenter deployment. However, for this deployment to work, I need the ASA to do a NAT translation between 2 networks. I will be receiving an incoming Radius accounting request stream f...

Please explain why we are going for hardware firewalls,since most routers have firewall features,IPS,IDS,stateful inspections of packets.So,what are the additional features in hardware firewall which are unique from routers

I have probably a very basic question on NAT.. Assume a PIX/FWSM has about 10 interfaces DMZ1 to DMZ10. DMZ X Network is 10.1.X.0 Now i would like to achieve this.. I would like to hide the 10.1.X.0 from each other.. If a host on DMZ1 i/f communica...