Network Security

I know this is possible, but I just can't figure out what the config would look like. The goal is to be able have a server farm inside a firewall answer requests that are destined to 2 different IP blocks during a migration period. The internal ser...

Could someone point out an advantage/disadvantage of either of these two approaches to deal with mtu path discovery issues. (1) The first one is to allow the 'packet needs to be frag'd but df set' through the use of an acl. (2) The second is done t...

Should we always need a static st. combined with ACL when connection is initiated from inside network. For example if am initiating a http connection from inside network then for the response http traffic should i need a static+ACL st.

I have PIX 506e with software version 6.1(4). By default access to PIX is diabled. But I want to give access to the perticular single IP to the PIX. What commands should I configured on PIX or how should I do?

Hi, We have ASA 5510 with ISR router. ISR router is having 2 internet link from same service provider and 2 pool of ip address for 2 intenet link. One is 512 and another is 2MB link. VPN traffic is going via 2MB link aand Internet Link is having 512K...

Hi all,We have 2 firewalls in our network. The internal firewall is a FWSM with inside and outside interface and all the NAT is performed on the FWSM. The DMZ exists on the external firewall. DMZ uses all public addresses.I am in the process of putti...

Hi,Currently i'm having trouble with this type of thing, my customer complaint that the PIX doesn't stop the threat, they have set emb_limit, max_conn, ip verify. And also when show ip audit count, large icmp is very high, is this a good news because...

Hello,can someone help me I'm running 7.1(2) on PIX 515E UR and my access-list is denying port 8888 eventhough I have it open up is there a bug in the software for that port. Here is the access-listaccess-list dmz_access_in extended permit tcp host ...

Hi,I have 2 Cisco ASA, configuring in failover. In the primary unit, I can see:his host: Primary - Active Active time: 3349739 (sec) slot 0: ASA5520 hw/sw rev (1.1/7.1(2)) status (Up Sys) Interface outs...

Good Morning allI'm having an issue with an internal ipsec tunnel between two pix's. The tunnel is built between two outside interfaces but the packets are being dropped at the inside interface with a no traslation group error, despite having the cor...

Hello,Is it possibly to measure the throughput for the tunnels setup on a pix 525? We need to verify by how much need to bump up our WAN pipe.Thanks,Stefano

I have a client who does not want to useAAA/LDAP to control user authentication andis fine with using local database authentication.They would like to migrate off of a VPN3030which has a maximum of 500 user entriestoday (and they would like more).So,...

Hi,Can somebody tell me how to downgrade the FWSM module on CAT 6500 from 3.1 to 2.3 version?RegardsSebastian