Network Security

We have 6.3(4) on PIX506E, and PIX515E, 7.1(2) on PIX525. They are rock solid and very happy with those.But after we upgraded PIX515E with 6.3(4) to 7.2(2), all ACLs stopped working.After downgraded from 7.2(2) to 7.1(2), eventhing went well.Andy ide...

Why when show crypto map the Current peer: 0.0.0.0 instead of the name of ip address it's peering with ??Crypto Map "vpn" 40 ipsec-isakmp Peer = au-syd-fw access-list VPN_au-syd; 16 elements access-list VPN_au-syd line 1 permit ip xxx xxx xxx Current...

we are planning to swap our internal firewall i.e. Juniper's Netscreen 208 with our external firewall i.e. PIX 515E IOS version 6.3.what is the best approch to plan and do this. Are their any configuration translator available for doing this.Adil

I have upgraded to PIX 525 7.2(2). When I did I used the same rules as on the 515. I know the fixup changed to inspect and have all working with the strange exception of VOIP and some special applications. one is with port 2000. I need to allow port ...

Here is the situation:ASA appliance, 7.x code.We have an inside network, say 192.168.1.0/24 on e0. We have a /27 assigned to the outside interface say e3. We want to use multiple contexts to migrate IP space. The new ip space is a /24. So the idea is...

We had a network outage yesterday due to telco issues and now that everything is suppose to be restored I am not able to get to any of my external facing sites from the outside. I can however see my Pix and my boarder router from the outside. I have ...

Thought I would post my problem here on the off chance that I'm not the only one.Behind a PIX 501 running 6.x code and behind a FWSM 2.3 this works without a problem.host1, host2 and host3 are behind an FWSM (3.1(1)) and are on the same subnet 172.31...

I have a PIX 501 on order, but I want to know before I get it:- Can the PIX 501 support routes to multiple noncontiguous IP subnets over a single tunnel? (i.e. routing 172.16.0.8/29 and 10.0.0.0/8 over the same tunnel)- Can the PIX 501 support multip...

I am running an ASA 5510 with software version 7.2 installed and VPN set up. From a functional standpoint, VPN appears to be working fine- users can connect and access the network and internet properly. However, whenever someone is connected, I get a...

Is there a way that I can get my MARS box to watch for a user defined CPU utilization on my PIX 5x5? There is an event (1211003) that is defined as CPU utilization of 100%, but I'd like one for 40%. Is that even possible?

Hi All, I have posted a couple of times on this already, but still cant quite get my head around it as I seem to be getting more confusing.All i need to do / know that suppose we have a vpn tunnel working on pix506 perfectly and natting is also being...

HiI'm trying to add a 3DES license key to a PIX515 running a restricted license and I get the following error:ERROR: The requested activation key was not saved because it is notvalid for this system.Does anyone know if the PIX supports 3DES on a rest...

I have a PIX that I would like to say has stopped passing traffic but that would not be exactly correct. I have not been able to get to any address that is set up as a statically translated through my PIX. From the internal network everything is work...

(I) Apart from the default configuration on ASA, what features do you guys usually enable for extra protection? I already have another IPS hence not doing any 'ip audits'. Any suggestions would be appreciated(II) I use these parameters for logging. D...

I work in call center for a very well known MFP company. We have a customer that has a Cisco 506e Pix Firewall with the Mailguard feature enabled (default). When they send an email from our MFP the EHLO command is rejected (only when using SMTP Auth)...