Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
What's the default icmp behavior on Pix?I can't seem to ping from any inside hosts to any outside hosts...What do I have to do to allow it, while blocking icmp initiated from outside?
Hi all:I currently have a T1 connection coming into a 1700 cisco router and a pix 515. I wanted to get add a dsl modem for internet access only. My first plan was to add another router and add routes on that (the cisco 1700 isn't our router and I d...
Hello everyone, I have a couple of routers outside a pix firewall that need NTP service.Due to some routing and NAT "issues" I cant get to the real NTP servers.Is it possible to peer to a PIX firewall (6.3)?I would use:switch(config)#ntp peer Pix-IPI...
Two weeks ago I deployed a Pix 501 with OS 6.3(1) to one of our remote sites. It ran great until last Friday when it would suddenly stop working every 16 minutes and 20 seconds. Yesterday the firewall was exhibiting the same behavior so I upgr...
hi guys, i got some prob in ASA plz help me out,, pc1-----------ASA----------pc2 outside inside now see nat is disabled and i have given an accesslist to allow pc1 to ping pc2. till here it is working fine. now suppose i have i...
Hi,I had an ACL for allowing DNS zone transfer and DNS queries to our DNS server that was allowing TCP/Domain and not UDP on port 53. I also must note that I didn't written that rule but inheritted it.after I added another ACL and created a pool thro...
I have setup a vpn access and it works fine. The only thing a can't is connecting to a sever in the dmz zone.What must i do to configure this. People want to acces a exchange server wich is in the dmz zone.
Hello everyone,Is there any special thing that I should enable in order to make TACACS work through a pix firewall (doing nat also).I have a few switches behind a firewall that need to be enabled with AAA authentication with TACACS.Please let me know...
We are trying to replace a pair of PIX515e's in HA mode on 6.35 with ASA5520's in Hot/Standby mode on 7.2.2. We copied the majority of commands successfully from the PIX's to the 515e's, but when did the swap out, all Dynamic NAT sessions failed to ...
Hi,Can someone help me in answering the following Question With PIX 525 version 6.2 can bandwidth distribution be done. I need sample configuration for the following Scenario BandwidthallocationInternet-Link is directly terminated on PIX 525 with In...
Hi,There seems to be no functionality in CSA-Windows Rule to prevent going a NIC into promiscious mode (Though there is a UNIX rule for that).How I can I prevent sniffer applications from being launched on Windows using CSA ?I don't want to create a ...
Cusotmer has an ASA 5520 running 7.2(1) with a CSC-SSM-20 module. The updates for the CSC module is set for 02:55 (note, this is am, not pm). In the syslogs, we are seeing the updates occur around this time as expected, but it also happened today in...
Anyone have a good value solution for the following requirements:2 x office sites located ~20Km apart with 7 people in each office.2 x ADSL circuits are being installed at each office. Performance 8Mbps downstream 768Kbps upstream contended 20:1 at ...
