Network Security

I have probably a very basic question on NAT.. Assume a PIX/FWSM has about 10 interfaces DMZ1 to DMZ10. DMZ X Network is 10.1.X.0 Now i would like to achieve this.. I would like to hide the 10.1.X.0 from each other.. If a host on DMZ1 i/f communicate...

I am setting up a PBX in the DMZ. The handsets are going to be on the inside network. The DMZ and the inside vlans have default settings (i.e. no explicit access-groups). For some reason even though the inside and dmz vlans are default I can't seem t...

Hello,I desperately need help & advise on this.I work for a Cisco Partner and I am in the midst of learning PIX & ASA firewall.I have purchased a PIX 515 myself & the company are ready to hand me over another one for a month which is identical as I h...

We have used Cisco ASA to protect Cisco Call Manager. Could Cisco ASA filter IP Phone users to login Call Manager's admin page such as URI filtering?Thanks,Raymond Chuang

I'm receiving the error below in my ASA logs for users connected to remote access VPN. I have a couple of site to site tunnels configured on the ASA as well. The error appears more for some users than others, but has appeared for every user that has ...

Hello,I am interested in moving my 2821s ISR fws to ZBF for readability and performance.Are there any tools for migrating from CBAC Inspect rules to Zone based Policy Firewall rules ?Is SDM usable for ZBF definitions ?Any other graphical tools ?Thank...

hi, in router we can configure the DNS server ip address of ISP in order to resolve the DNS query of internal client with the help of ip name-server command i want to know how can i configure the same thing for the PIX 515 with version6.3?regardsdeva...

Hi all,Does a PIX 515E support compression for VPN clients? As far as I remember it is not supported because the device does not have the horsepower?Thanks!Jacques

Hi There,My set up is bassicallyinternet-router-PIX-router-switchoff the switch I have multiple LANSof which I only want one segment to be able to get out totaly unrestricted.With the basic implied rule I can get out to the internet fien and dandy. B...

I know that historically the Pix has not allowed packets arriving on the inside interface to be routed back out the same interface. With v7.x, though, the command "same-security-traffic permit intra-interface" apparently allows hairpinning of encrypt...

we have a vpn on PIX515E, and now I need to setup another VPN with a outside peer. However, when I configure the PIX, I use the following command: isakmp key <Keystring> address A.B.C.D [netmask mask]. However, after I type in this, the previous comm...

I am using RDEP to subscribe to IDS sensors and retrieve alerts. In a specific signature I am interested in the content of the traffic from the attacker and victim. In the XML format for RDEP, this content seems encrypted in some way, what format is ...

Hi Sir,A simple question: Does the ASA 5540 support online insertion and removal (OIR) of the 4-Port Gigabit Ethernet Security Services Module (SSM-4GE)?I can't seem to find this info on cisco.com. Please help.Thank you.B.Rgds,Lim TS

Hello,I have a remote user connected via IPSec tunnel to his company.- The remote user is behing a PIX firewall (PIX-525 version 6.3)- The exchange server is behind a VPN terminator (stonegate)The user get to send email but NOT receive. If the remote...