Network Security

We have a remote site that is changing their subnet. They have an access list doing a NONAT across the VPN tunnel. Will anything break if we just leave all the crypto maps, and the access lists the same, simply change the IP addresses that are define...

Hi, im looking to have my pix pass thru VPN requests to my win2k3 box.I read in the cisco docs it only supports one connection at a time to be passed through, by that do they mean one client or one vpn only?Thanks,Chris

I'm trying to configure a site to site VPN connection with PIX5153 6.3(5) on my end and Checkpoint at the other end.host (172.30.10.x)--->PIX 515e---------Ceckpoint<---host.The problem is when communications are initiated from the 172.30.10.x host, I...

Hi,First a bit of historyA few months ago we upgraded our PIX 515 from version 6.3(5) to version 7.2.1. we then suffered the consequences with a very heavily utilised CPU and packet loss.. the thing was idling around 50% cpu..Anyway we have just rece...

I'm moving a VPDN setup from a PIX to a Cisco2801. However, what's the equivalent commands on 2801 to the following PIX commands:vpngroup 1 dns-server VTelEXInside VTelNTInsidevpngroup 1 split-dns vermonttel.comvpngroup 1 idle-time 1800vpdn group 1 c...

I have the below a couple of questions about the below configs.1.Policy-map OUTBOUNDclass Voice priorityservice-policy OUTBOUND interface outsideWill the priority command under the policy map enable a packet under this specific class to have priority...

Hi;How many interface should be reserved in the ASA A/A setup for inside and for outside ?Thx

Hi,We have PIX 501 configured with PAT for general Internet access, no ACL applied to inside interface. Sometimes some of the users cannot access services on the Internet (ports 80, 25), they can access those services on the LAN so I think the PIX is...

Hi all, I use Catalyst 6513 + IDSM-2, I also use Cisco Work VMS 2.3 to manage IDSM-2. Now, I want to configure whenever IDSM-2 sees an attack, it sends snmp or some thing like that by syslog to VMS server. If you see unclearly, you can ask me. Duy Kh...

Hi,I was trying to configure outside nat to allow a host on the dmz (FLSM) interface to telnet to a host on the inside interface. I gave up and called cisco tac. They were able to get it to work for me by combining a nat 0 command with outside nat. B...

i read in the cisco documentation that if i want users on the outside interface (lower security level) telnet to inside interface (higher security level) we should use static with access-list to allow the traffic. Now this is called translation, righ...

Hello all, I am having an issue with one of our VPN's that was recently setup and I am seeing ICMP errors. When I send a simple ping test to the destination IP, I am seeing the following messages while running the debug log-viewer:208.x.x.x|Built ICM...

Hello,I have a softphone using SIP on port 5060. I check the PIX 501 (version 6.3(3), using show conn, but all I can see is the connection to the voice gateway on a different port (eg.29051). If I use the softphone on an internet connection without a...

Hi,We have a customer that is having problems with one specific client-server application. The app protocol looks kind of like HTTP on the wire, but isn't. The server is on the Internet, and the client is behind the 'inside' interface. Whenever the c...