Network Security

Should we always need a static st. combined with ACL when connection is initiated from inside network. For example if am initiating a http connection from inside network then for the response http traffic should i need a static+ACL st.

I have PIX 506e with software version 6.1(4). By default access to PIX is diabled. But I want to give access to the perticular single IP to the PIX. What commands should I configured on PIX or how should I do?

Hi, We have ASA 5510 with ISR router. ISR router is having 2 internet link from same service provider and 2 pool of ip address for 2 intenet link. One is 512 and another is 2MB link. VPN traffic is going via 2MB link aand Internet Link is having 512K...

Hi all,We have 2 firewalls in our network. The internal firewall is a FWSM with inside and outside interface and all the NAT is performed on the FWSM. The DMZ exists on the external firewall. DMZ uses all public addresses.I am in the process of putti...

Hi,Currently i'm having trouble with this type of thing, my customer complaint that the PIX doesn't stop the threat, they have set emb_limit, max_conn, ip verify. And also when show ip audit count, large icmp is very high, is this a good news because...

Hello,can someone help me I'm running 7.1(2) on PIX 515E UR and my access-list is denying port 8888 eventhough I have it open up is there a bug in the software for that port. Here is the access-listaccess-list dmz_access_in extended permit tcp host ...

Hi,I have 2 Cisco ASA, configuring in failover. In the primary unit, I can see:his host: Primary - Active Active time: 3349739 (sec) slot 0: ASA5520 hw/sw rev (1.1/7.1(2)) status (Up Sys) Interface outs...

Good Morning allI'm having an issue with an internal ipsec tunnel between two pix's. The tunnel is built between two outside interfaces but the packets are being dropped at the inside interface with a no traslation group error, despite having the cor...

Hello,Is it possibly to measure the throughput for the tunnels setup on a pix 525? We need to verify by how much need to bump up our WAN pipe.Thanks,Stefano

I have a client who does not want to useAAA/LDAP to control user authentication andis fine with using local database authentication.They would like to migrate off of a VPN3030which has a maximum of 500 user entriestoday (and they would like more).So,...

Hi,Can somebody tell me how to downgrade the FWSM module on CAT 6500 from 3.1 to 2.3 version?RegardsSebastian

Dear Pros,Project explanation: Pair of pix firewall configured as failover.The outside of the pix pair connected to the internet gateway router 3825.Inside of the pix pair connected to the core switch ports configured with the vlan.The configuration...

1a. Trying to redirect an external ip to a DNS name/alias.1b. Redirect a external DNS name/Alias to a internal DNS name/Alias.2. Trying to do port forwarding from one public IP (with various ports) to many internal IPs.2a. Ports 80,81,82,83If they ar...