Network Security

In the following commandstatic (inside,outside) 1.1.1.1 192.168.1.1 192.168.1.1 is a local ip address. The question is: Does this address have to be on the directly connected subnet?Can it be on other internal subnets (behind the branch office router...

Hi, I have a simple question here, regarding the static nat, suppose that webserver is 192.168.1.2 and public ip 200.200.200.202static (inside,ouside) 200.200.200.202 192.168.1.2 netmask 255.255.255.255and there is no access-list to permit inbound tc...

Is there any way to change duplex settings on FWSM?

when treatment to enter the PIX leaves the following error to me Requesting URL: java.security.AccessControlException: access denied (java.util.PropertyPermission java.version read) at java.security.AccessControlContext.checkPermission(Unknown Source...

When NAT and Static sts. are there Static will take precedence say for ex. if the traffic is from same host and outbound. in this case will it work for outbound access using sTATIC if NAT is removed

I'm currently setting up a PIX 515e at home as follows:Cable Modem --> 2621 Router --> PIX --> SwitchThe inside port on the PIX is up,up however I can't get the outside to connect.Here are the config's for the interfaces:2621:FastEthernet0/1 is up, l...

I have a 2811 with two T1 lines incoming which are set to load-sharing per-packet.I want to be able to send traffic out (web browsing, IM, etc.) and allow traffic in to specific servers (http, https, etc.).I've been tearing my hair out trying to get ...

I have got one PIX515E it has the software version 6.3 and having restricted license...I cant access ASDM.Can anyone suggest what to do to access ASDM

Hi, I have two Cisco ASA. In each device, I have a CSC Module.I can?t update the CSC in ASA1 (active), however I can update the CSC in ASA2. On the other hand, I have configured failover between them, but they doesn?t synchronize.I have review the ar...

How to disable mail guard feature in cisco PIX515 with 6.3(5) version

I have a situation where I need to nat from our VPN Pool to a specific address on a dmz interface and use PAT to the DMZ interface IP.Here is what I came up with, but does not work:ip local pool vpnpool 192.168.200.5-192.168.200.250 mask 255.255.255....

Hi,Is it possible to use the extra port of the ASA5510 with base license upgraded to enhanced license to for a new OUTSIDE segment network that will NAT to a new internal VLAN network, the 3rd interface of the ASA is running trunk. Say 10.10.X.X(new...

I know this is possible, but I just can't figure out what the config would look like. The goal is to be able have a server farm inside a firewall answer requests that are destined to 2 different IP blocks during a migration period. The internal ser...

Could someone point out an advantage/disadvantage of either of these two approaches to deal with mtu path discovery issues. (1) The first one is to allow the 'packet needs to be frag'd but df set' through the use of an acl. (2) The second is done t...