Network Security

Help! I have 2 877 routers connected using site to site vpn over adsl links. Everything seems to work fine (ping/telnet etc) except remote desktop will not establish a connection back to the main site and the 2003 Terminal server. There are no firewa...

I have a PIX 501 behind a comcast business gateway with a static IP address. Hooked up a web server on the internal LAN and trying to allow outside access to the web server.Internal network is able to access the internet. VPN access to the internal n...

Hi,I'm looking towards procuring some ASA55xx as firewall for a datacenter deployment. However, for this deployment to work, I need the ASA to do a NAT translation between 2 networks. I will be receiving an incoming Radius accounting request stream f...

Please explain why we are going for hardware firewalls,since most routers have firewall features,IPS,IDS,stateful inspections of packets.So,what are the additional features in hardware firewall which are unique from routers

I have probably a very basic question on NAT.. Assume a PIX/FWSM has about 10 interfaces DMZ1 to DMZ10. DMZ X Network is 10.1.X.0 Now i would like to achieve this.. I would like to hide the 10.1.X.0 from each other.. If a host on DMZ1 i/f communicate...

I am setting up a PBX in the DMZ. The handsets are going to be on the inside network. The DMZ and the inside vlans have default settings (i.e. no explicit access-groups). For some reason even though the inside and dmz vlans are default I can't seem t...

Hello,I desperately need help & advise on this.I work for a Cisco Partner and I am in the midst of learning PIX & ASA firewall.I have purchased a PIX 515 myself & the company are ready to hand me over another one for a month which is identical as I h...

We have used Cisco ASA to protect Cisco Call Manager. Could Cisco ASA filter IP Phone users to login Call Manager's admin page such as URI filtering?Thanks,Raymond Chuang

I'm receiving the error below in my ASA logs for users connected to remote access VPN. I have a couple of site to site tunnels configured on the ASA as well. The error appears more for some users than others, but has appeared for every user that has ...

Hello,I am interested in moving my 2821s ISR fws to ZBF for readability and performance.Are there any tools for migrating from CBAC Inspect rules to Zone based Policy Firewall rules ?Is SDM usable for ZBF definitions ?Any other graphical tools ?Thank...

hi, in router we can configure the DNS server ip address of ISP in order to resolve the DNS query of internal client with the help of ip name-server command i want to know how can i configure the same thing for the PIX 515 with version6.3?regardsdeva...

Hi all,Does a PIX 515E support compression for VPN clients? As far as I remember it is not supported because the device does not have the horsepower?Thanks!Jacques

Hi There,My set up is bassicallyinternet-router-PIX-router-switchoff the switch I have multiple LANSof which I only want one segment to be able to get out totaly unrestricted.With the basic implied rule I can get out to the internet fien and dandy. B...

I know that historically the Pix has not allowed packets arriving on the inside interface to be routed back out the same interface. With v7.x, though, the command "same-security-traffic permit intra-interface" apparently allows hairpinning of encrypt...