Network Security

hi all,i have a pix 506e on which we have a vpn "crypto map with isakmp" tunnel created with a second party to be used for particular business need.recently we are undergoing another project with them and for this they require us to allow specific ip...

Hello, I am new to vpn concentrator. This is a completely new LAN design.I am going to place an 2811 ISR router on my edge and my routers private interface is to be connected to the VPN concentrator. My local area network switch is connected to the o...

hi allis it possible to assign an ip address from inside ip range to the management port also.pls suggestRegardsBinoy

Hi,We have a pix 506e which is working fine for client side vpn access to our network (192.168.10.x).We now have a new site (192.168.20.x) and bought an ASA5510 to get a secure tunnel between the two sites. Although we have a tunnel established, we c...

Customer has an interfaces subinterfaced into two DMZs. Sh int shows a lot of discard packets which don't seem to be related to physical errors. I ran a capture on the ASA but this all looks good to me. Does the capture not show what came in but was ...

Hi,I need configuration help for PIX 525 with PIX OS 7.1My scenario is like this:Firewall inside network 192.168.1.0 /24Firewall inside interface IP 192.168.1.1Firewall outside network 192.168.2.0/24Firewall outside interface IP 192.168.2.1I have to ...

hi guyswhat is the diffrence between the retired cisco exam 642-531 and the new one 642-532thanks in advance

In version 6.49, I saw the introduction of the parenthesis to some variables in the built-in rule:Pre-649 Example: @(system)649 Example: @systemNot all rules have parenthesis with their variables - just some. Is there a benefit to the use of parenthe...

If we want our user community to have a new profile added (.pcf file) to their local Cisco VPN client what is the best way to do this without have to touch every machine. We have Cisco VPN 3005 and various versions of the VPN client.

Hello everbody, i'am here for the first time and i hope you can answer my question. We have an ASA-Server and the Cisco Security Manager 3.0.1. After we changed some things in the manager we want to submit and deploy the changes to the ASA-Server. Ev...

I have an issue where I need to set up a site to site VPN with a partner company through a PIX. The partner company has a site to site tunnel with a vendor that is a duplicate subnet to ours (10.0.0.0/16). Can anyone point me in the right direction a...

I don't what's going over here.I just bought this device and spent two days trying to configure the firewall but still don't get success. I can't block icmp traffic using access-list command but can using icmp command.All redirections don't work on t...

Hello all,I'm trying to upgrade the IPS sig's on an ASA5520 with a SSM IPS module. I'm trying to upgrade the system to 5.1.1 to further upgrade the device with no luck. I followed these steps provided by Cisco.com: 1. Log in to the ASA. 2. Enter enab...

Is there any possibility that there will be a version 7.x release for the PIX 501 (and the 506) any time soon, if at all?The current security exams are based on ASA and PIX version 7.0. I only have a PIX 501 available to study with.ThanksAndy