Network Security

Hi!I've been noticing that some mail-servers (SMTP) and web-servers (HTTP(HTTPS) use dynamic connections when we connect to them.Lets say we are on a PIX/ASA inside network and do a 'http://www.xpto.com' to access this web site. Basicaly we are acess...

Dear ALL,I'd like subscribe for 3DES free activation keys, but in the form are requested "PAK or SW Serial Number".I've bought 2 PIX (unrestricted+stand by) but please, where I can find these numbers ? Regards Alberto br...

okay I have written an ACL that permits internal hosts access to the outside. I also have a DMZ which VPN traffic should be routed to, and which should not be natted. I understand that I can create and ACL for the traffic to be natted and apply it t...

We need solve following scenario LAN(192.168.10.x) | | router-----------HQ(10.130.10.0/24) | | PIX | |Partner network (10.130.10.0/24)Our LAN 192.168.10.x is connected vi...

Hi,We have a 515e with the four port expansion card and a Citrix CAG which we want to use to give users web access to to citrix. I am presuming that the best way to do this is by setting up a DMZ.The outside interace of the pix has a public ip 194.xx...

Hi All, Can I have multiple subnet on an interface of PIX/ASA firewall..Like if I have two different public range from ISP & i want to use both the range for my servers kept behind the DMZ & firewall has only three interfaces..inside,outside & DMZ.....

Dear ALL,I'm going to replace a PIX 515E running 6.1 with a new Unresticted PIX515E running 6.3, so I canwork offline with the old one to run all update tasks.Configurations are exactly the same, but when I replace PIX , the new one does not run prop...

i have ASA5510 with the ff access-list_1where:xxx= inside subnetxxx_1=allowed internet accessyyy=public host hosting mail serveraccess-list acl_in permit ip xxx anyaccess-group in interface insideaccess-list permit tcp xxx_1 any eq httpaccess-list pe...

Hi,I'm not able to update (reinstall) a ASA-SSM-CSC-10 module. I used the CLI-Command : "hw module 1 recover boot". But the module is still in the Recover-mode. Output from CLI (I used the image: csc6.1-b1519.bin):Slot-1 890> !!!!!!!!!!!!!!!!!!!!!!!!...

Dear Friends,I have configured pix 515 E with below ipsip address outside x.x.x.x 255.255.255.192ip address inside 192.168.68.21 255.255.255.0ip address dmz 172.16.31.1 255.255.0.0ip address dmz2 192.168.90.0 255.255.255.0ip address dmz3 192.168.59.2...

Hello, I have always wondered what is regarded the best setup for ICMP traffic with 8 IP addresses. I am using Multi-Nat on an 877W router. Basically, what types should be allowed out and in to my network, should I allow it to just the router IP...

hi could anyone pls tell me how to use the established command in pix. i tried reading the documentation but really understand when to use it. can someone pls explain. thanks in advance. regardssebastan

Hello all, I have a pix as vpn gateway and client software is VPN client 4.0.1, when clientconnect to the pix successfully, under menu [Statistics]->[Secured Routers] thers are some many info, what I want to know is that how could this list means and...

Can I do some sort of dead connection detection on my PIX 515, where I have 2 default routes defined going to different ISPs, but it uses one as the primary and only use the other if the first connection is down?If so, what configuration would I need...

hi all i would like to ask something abt the license. i have got 2 asa 5510 security plus license. so both of them are supporting failover. now i just want to test the aip-ssm module of the asa. can i buy one and put it on the asa and use it. i know ...