Network Security

When a VPN client attaches to our network (1 specific employees home computer) I always get this message on our PIX. 2005-01-04 07:44:44 Local4.Error 159.87.32.225 Jan 04 2005 07:44:44: %PIX-3-106011: Deny inbound (No xlate) udp src outside:10.252.1....

Hello,I would like to understand the following point:is it possible to configure a Cisco Client IPSEC VPN with PIX-535 using client certificates (smart cards)issued by third-party CA? All our users have to use the smart card issued by a government au...

HelpI have been hitting my head against this brick wall called an ASA5510. I was trying to configure it as a straight firewall with a DMZ interface and connecting a DNS server to that. But right now I would be happy with just passing HTTP between int...

I have a PIX 525E with IOS 6.3.We've just recently installed a point-to-point T1 that is terminated with 2 Cisco 2610XM routers with VWIC-1MFT-T1 cards (IOS = 12.2).The two networks at the remote end of the T1 connection can access all resources at t...

I have a site to site VPN over a DSL. My DSL line terminates on an 877 router on the one end and a pix 506 on the other end. I have a site-to-site VPN from an ASA on the other side of the 877 and the 506. I have having problems running certain applic...

I have 6 interfaces in mt PIX515 firewall,E0 is connected to the Internet through router.E1 interface is assigned as 10.16.10.1 with 255.255.0.0,connected to a switch,in the same trusted network there is a Domino mail server,whose address is 10.16.10...

Dear sir, in my network iamhaving pix515e now iam changing the pix to asa5520.my pix 515e is already configured that same config iam changing to asa5520 in vpn group iam getting one messiage is given below the 'vpngroup' command has been deprecated, ...

I have to allow only MSN chat from some of computer.HOw can I do it in PIX firewall? Is there any specific port for only for MSN chat(NOT voice,File transfer etc)

Quick question on the 515E models, I have read the 515E product specs indicating these models can only support a maximum of 6 physical interfaces. I currently have a set of 515Es in a failover configuration, each with one PIX-4FE-66 card and a SafeXc...

Hi guys, I'm starting to configure the failover functionality between two 6509 switches with a fwsm in both. I just had a hypothetical question. Here's the scenario:Connected to both of these 6509 switches I have a 3560 acting as a dmz zone. I have a...

Anyone got a date for the patch that will allow CSM to manage the IPS runnning 6.0 ?I believe it was going to be 3.1?

I just bought a pix 520 from ebay my sh ver is Licensed Options:Failover: EnabledIPSec: EnabledPorts allowed: 6I can't figure out what type of license it has I know the pix what used in a failover enviroment.Thanks

hi :I configured sub inteface on the ASA for inter-vlan routing, I can ping from my PC 172.16.2.122 to other IP within the same subnet. but i cannot ping other subnet, say: 172.16.2.51. here is my configuration:SNGFWL001/Ctx1# SH RUN: Saved:ASA Versi...