Network Security

I made an error on Drop rule so I want to delete this rule but there does not appear to be away to do this. I can change the status to inactive but I would like to delete the rule.

I did some policy NAT'ng on the outside interface of our Internet facing firewall and it broke some other NAT'ng and I'm not sure why. I had the following config put in placeaccess-list policy_nat permit tcp any host 12.1.1.1 eq sslnat(outside) 2 acc...

Folks, Can i access my ids at port 80? when i run the setup and specify port 80, it does not do anything for me, do i need to do anything else?

I am in the process of configuring a 871 router using the Easy VPN. We will be deploying laptops and want to statically assign IP's to each laptop based on the MAC address of the Verizon Aircards they will be using. So basically we want the IP attach...

Hi, I have an issue with our VPN. We recently moved from a 506 to a 515e. We essentially set up the vpn as per the old config. The problem is some users connect fine and other user connect but cannot access anything on the internal LAN? I have attach...

I have a site to site VPN being set up between 2 515s, each running 6.3(5).We have overlapping encryption domains (the servers we need to access at the remote location are in a network we already have locally defined).How can I overcome this?Servers ...

Hi,My company have recently installed a managed MPLS WAN service. In order to continue using OSPF as our routing protocol across our Wans I set up GRE tunneling on our routers. We need to implement COS/QOS for VIOP traffic However I am not particular...

Has anybody deployed FWSMs to firewall campus traffic? we are trying to deploy 2 FWSMs on our 2 Cores Routers which are fully meshed to Internet Edge routers and Distribution layer router, so Asymmetric Routing and FO are must, unfortunately we can n...

hello,I have a customer who finds random problems to be connected, through VPN IPSEC, to a remote web server. Below you can find router's log:.Sep 8 12:24:52: CRYPTO_ENGINE: locally-sourced pkt w/DF bit set is too big,ip->tl=1443, mtu=1384.Sep 8 12:2...

I have two VPN3015 (version: 4.1.7E) used in VRRP on a network.Is it possible on the VPN3015 to save the configuration automatically on an external system? (so, without use the manual backup procedure , Xml and tftp)When the two VPN3015 (used in VRRP...

Hi All,I have a CISCO VPN 401,need to know how i can achieve VPN connection with PIX and VPN 401..ANy pointers?thanks in advanced.

Hello, i have a pix 525 with several vlans. Some are public, others are private (NAT) networks. I'm having problems with my ISP dropping the connection because some of my clients are opening too much new connections/sec. Can the PIX throttle this con...

Hi All,I would like to know which all ports are opened from outside to inside of a Pix.Coz I have an access-list like this; "access-list acl-out permit ip host 192.168.10.100 host 172.16.1.50"Now I have to open a port 7001 in our pix from the outside...