Network Security

Hope you guys can help; I'll start by outlining the current situation.We have a small site in Malaysia (KL) that has a vpn 3000 concentrator. This has a single ipsec lan-to-lan tunnel with our head office in the US. All traffic goes over this tunnel,...

Hi,i have a pix 515e with the following configDMZ Exhange server and a web serverInternal a lot of servers and workstation. When i try to browse the network i cannot see the server in the DMZ. People cannot connect to the exchange server with webmai...

Hi,Anyone can help what are the Pros and Cons of Cable Based Active/Active Failover over LAN-Based?Also, why there is a need for switch in the LAN Based Failover? Isnt it a point of failure as well? Why can't a cross cable be used?Lastly, How fast is...

Help! I have 2 877 routers connected using site to site vpn over adsl links. Everything seems to work fine (ping/telnet etc) except remote desktop will not establish a connection back to the main site and the 2003 Terminal server. There are no firewa...

I have a PIX 501 behind a comcast business gateway with a static IP address. Hooked up a web server on the internal LAN and trying to allow outside access to the web server.Internal network is able to access the internet. VPN access to the internal n...

Hi,I'm looking towards procuring some ASA55xx as firewall for a datacenter deployment. However, for this deployment to work, I need the ASA to do a NAT translation between 2 networks. I will be receiving an incoming Radius accounting request stream f...

Please explain why we are going for hardware firewalls,since most routers have firewall features,IPS,IDS,stateful inspections of packets.So,what are the additional features in hardware firewall which are unique from routers

I have probably a very basic question on NAT.. Assume a PIX/FWSM has about 10 interfaces DMZ1 to DMZ10. DMZ X Network is 10.1.X.0 Now i would like to achieve this.. I would like to hide the 10.1.X.0 from each other.. If a host on DMZ1 i/f communica...

I am setting up a PBX in the DMZ. The handsets are going to be on the inside network. The DMZ and the inside vlans have default settings (i.e. no explicit access-groups). For some reason even though the inside and dmz vlans are default I can't see...

Hello,I desperately need help & advise on this.I work for a Cisco Partner and I am in the midst of learning PIX & ASA firewall.I have purchased a PIX 515 myself & the company are ready to hand me over another one for a month which is identical as I h...

We have used Cisco ASA to protect Cisco Call Manager. Could Cisco ASA filter IP Phone users to login Call Manager's admin page such as URI filtering?Thanks,Raymond Chuang

I'm receiving the error below in my ASA logs for users connected to remote access VPN. I have a couple of site to site tunnels configured on the ASA as well. The error appears more for some users than others, but has appeared for every user that ha...

Hello,I am interested in moving my 2821s ISR fws to ZBF for readability and performance.Are there any tools for migrating from CBAC Inspect rules to Zone based Policy Firewall rules ?Is SDM usable for ZBF definitions ?Any other graphical tools ?Than...