Network Security

Hi all,We have 2 firewalls in our network. The internal firewall is a FWSM with inside and outside interface and all the NAT is performed on the FWSM. The DMZ exists on the external firewall. DMZ uses all public addresses.I am in the process of putti...

Hi,Currently i'm having trouble with this type of thing, my customer complaint that the PIX doesn't stop the threat, they have set emb_limit, max_conn, ip verify. And also when show ip audit count, large icmp is very high, is this a good news because...

Hello,can someone help me I'm running 7.1(2) on PIX 515E UR and my access-list is denying port 8888 eventhough I have it open up is there a bug in the software for that port. Here is the access-listaccess-list dmz_access_in extended permit tcp host ...

Hi,I have 2 Cisco ASA, configuring in failover. In the primary unit, I can see:his host: Primary - Active Active time: 3349739 (sec) slot 0: ASA5520 hw/sw rev (1.1/7.1(2)) status (Up Sys) Interface outs...

Good Morning allI'm having an issue with an internal ipsec tunnel between two pix's. The tunnel is built between two outside interfaces but the packets are being dropped at the inside interface with a no traslation group error, despite having the cor...

Hello,Is it possibly to measure the throughput for the tunnels setup on a pix 525? We need to verify by how much need to bump up our WAN pipe.Thanks,Stefano

I have a client who does not want to useAAA/LDAP to control user authentication andis fine with using local database authentication.They would like to migrate off of a VPN3030which has a maximum of 500 user entriestoday (and they would like more).So,...

Hi,Can somebody tell me how to downgrade the FWSM module on CAT 6500 from 3.1 to 2.3 version?RegardsSebastian

Dear Pros,Project explanation: Pair of pix firewall configured as failover.The outside of the pix pair connected to the internet gateway router 3825.Inside of the pix pair connected to the core switch ports configured with the vlan.The configuration...

1a. Trying to redirect an external ip to a DNS name/alias.1b. Redirect a external DNS name/Alias to a internal DNS name/Alias.2. Trying to do port forwarding from one public IP (with various ports) to many internal IPs.2a. Ports 80,81,82,83If they ar...

I have an extended ACE configured on a PIX Firewall. The purpose of the Firewall is a choke point coming off of the customer's DMZ into the Production networks.There are a couple of hosts on networks inside of the Firewall that hosts in the DMZ need...

How do I set up a report in MARS when I look at the top destination ports I want to drill down even further to see what address are accessing those top ports? I am new to the box so I am still learning the features.

Hi,I am in the process of building a pix 515e to replace my 506e. Below is part of the current 506 configuration. conduit permit tcp host xxx.xxx.xxx.xxx eq ssh anyconduit permit udp host xxx.xxx.xxx.xxx host xxx.xxx.xxx.xxx eq syslogconduit permit...