Network Security

Hi, I need to redirect MS Exchange (smtp, pop3, imap4, http, https) ports on a CISCO pix 506e firewall using PDM 3.0 (no CLI). PIX public IP: A.B.C.D, mask 255.255.252, MS Exchange server is : 192.168.105.8, mask 255.255.255.0, gtwy. 192.168.105.1 Al...

Hello, I have ISP--Outside_Router--ASA. THe subnet between the Outside_Router is private subnet 192.168.0.0/30. However, all my NAT/PAT I am using public IPs. Now we need to setup VPN tunnel from PIX to remote office. How can I do that? I mean sinc...

I'm have a pix 515 running ver 7, ASA, and want to make it a hub for several site to site tunnels. I have one tunnel in place on the pix 515 and am running remote access vpn concurrently with the tunnel. Now I want to add another tunnel. What's the...

Is this a problem with the DNS fixup? I have a new PIX 501 that I have in place on my home network - Its attached to Verizon FiOS via PPPoE. DNS queries from PCs on the network work perfectly, however, the DNS queries initiated by the Verizon CATV ...

Right now most of the rules I am creating are drop rules while doing the initial tuning of my MARS box. When I use the query to save as a rule, it apprears that you can only save it as an inspection rule and never as a drop rule. Am I missing somet...

1599 10/19/2006 15:27:36.790 SEV=5 IKE/231 RPT=8 210.x.x.x Group [210.x.x.x] Could not find centry for IPSec SA delete messageHi after a document which will allow me to decifer and understand VPN concentrator messages like the above.ThanksSimon

I am configuring a site to site VPN with a Cisco ASA 5510 on each side. Site A and site B each have several local router hops. We currently run Rip v2 at each site. Is it possible to forward Rip broadcasts through the VPN or is it time to look at ...

The SVR is on VL60, the PC is on VL80. So, PC(.25--VL81--GE0/7--VL80--SVI 80--SVI60--VL60--SVR(.10)Sensor interface GigabitEthernet0/7 is assigned to trunk all Vlans 1-4094CAT65K-PODX#sh ru | in intrusionintrusion-detection module 6 management-port a...

Hello, I know that ASA can support dual ISP configuration using the track option in the new version. My issue is that I will terminate both ISPs to different interfaces on the ASA however, I will use the track option. My problem is with the Static N...

My entire network access everything on the outside using Nat0. Is it possible to have the entire network acces a single outside destination address via a nat'd address?So, if I'm going anywhere on the outside I don't get address translated but if I'm...

Hi All,I have at work a Pix 515E utilizing s/w 6.3(4) - all 6 physical interfaces are in use.I need to use the vlan support that the pix provides. What I want to know is whether I will lose any of the pix current config associated with the interface ...

Hi,I have Cisco 877W ADSL router installed in front of Cisco ASA 5510, this router terminate Remote Access IPSec VPN tunnels. The PIX does not do NAT since the router do that.I can access the management IP address through inside, but when i connect u...

Hi,I would like to understand how pix do the firewalling, ie. a Packet from inside go to outside (webserver), the nat and global are done and there is an outbound filter for inside allowing http.Which will be process in the pix, first look for ACLs i...