Network Security

Hi All,I have posted a couple of times on this already, but still cant quite get my head around it as I seem to be getting conflicting information.All I am looking to do is to allow communications bi-directionally between 2 DMZ servers and 1 Inside s...

On our router I am trying to configure th IPS to only alarm on its rules. I do not want it to drop packets. If I right click on a rule and select actions and uncheck "drop" and "deny" then hit "Apply Changes" This does not work; it does not save the ...

Hi!I've been noticing that some mail-servers (SMTP) and web-servers (HTTP(HTTPS) use dynamic connections when we connect to them.Lets say we are on a PIX/ASA inside network and do a 'http://www.xpto.com' to access this web site. Basicaly we are acess...

Dear ALL,I'd like subscribe for 3DES free activation keys, but in the form are requested "PAK or SW Serial Number".I've bought 2 PIX (unrestricted+stand by) but please, where I can find these numbers ? Regards Alberto br...

okay I have written an ACL that permits internal hosts access to the outside. I also have a DMZ which VPN traffic should be routed to, and which should not be natted. I understand that I can create and ACL for the traffic to be natted and apply it t...

We need solve following scenario LAN(192.168.10.x) | | router-----------HQ(10.130.10.0/24) | | PIX | |Partner network (10.130.10.0/24)Our LAN 192.168.10.x is connected via leased line to o...

Hi,We have a 515e with the four port expansion card and a Citrix CAG which we want to use to give users web access to to citrix. I am presuming that the best way to do this is by setting up a DMZ.The outside interace of the pix has a public ip 194.xx...

Hi All, Can I have multiple subnet on an interface of PIX/ASA firewall..Like if I have two different public range from ISP & i want to use both the range for my servers kept behind the DMZ & firewall has only three interfaces..inside,outside & DMZ.....

Dear ALL,I'm going to replace a PIX 515E running 6.1 with a new Unresticted PIX515E running 6.3, so I canwork offline with the old one to run all update tasks.Configurations are exactly the same, but when I replace PIX , the new one does not run prop...

i have ASA5510 with the ff access-list_1where:xxx= inside subnetxxx_1=allowed internet accessyyy=public host hosting mail serveraccess-list acl_in permit ip xxx anyaccess-group in interface insideaccess-list permit tcp xxx_1 any eq httpaccess-list pe...

Hi,I'm not able to update (reinstall) a ASA-SSM-CSC-10 module. I used the CLI-Command : "hw module 1 recover boot". But the module is still in the Recover-mode. Output from CLI (I used the image: csc6.1-b1519.bin):Slot-1 890> !!!!!!!!!!!!!!!!!!!!!!!!...

Dear Friends,I have configured pix 515 E with below ipsip address outside x.x.x.x 255.255.255.192ip address inside 192.168.68.21 255.255.255.0ip address dmz 172.16.31.1 255.255.0.0ip address dmz2 192.168.90.0 255.255.255.0ip address dmz3 192.168.59.2...

Hello, I have always wondered what is regarded the best setup for ICMP traffic with 8 IP addresses. I am using Multi-Nat on an 877W router. Basically, what types should be allowed out and in to my network, should I allow it to just the router IP...

hi could anyone pls tell me how to use the established command in pix. i tried reading the documentation but really understand when to use it. can someone pls explain. thanks in advance. regardssebastan

Hello all, I have a pix as vpn gateway and client software is VPN client 4.0.1, when clientconnect to the pix successfully, under menu [Statistics]->[Secured Routers] thers are some many info, what I want to know is that how could this list means and...