Network Security

Hi,My company have recently installed a managed MPLS WAN service. In order to continue using OSPF as our routing protocol across our Wans I set up GRE tunneling on our routers. We need to implement COS/QOS for VIOP traffic However I am not particular...

Has anybody deployed FWSMs to firewall campus traffic? we are trying to deploy 2 FWSMs on our 2 Cores Routers which are fully meshed to Internet Edge routers and Distribution layer router, so Asymmetric Routing and FO are must, unfortunately we can n...

hello,I have a customer who finds random problems to be connected, through VPN IPSEC, to a remote web server. Below you can find router's log:.Sep 8 12:24:52: CRYPTO_ENGINE: locally-sourced pkt w/DF bit set is too big,ip->tl=1443, mtu=1384.Sep 8 12:2...

I have two VPN3015 (version: 4.1.7E) used in VRRP on a network.Is it possible on the VPN3015 to save the configuration automatically on an external system? (so, without use the manual backup procedure , Xml and tftp)When the two VPN3015 (used in VRRP...

Hi All,I have a CISCO VPN 401,need to know how i can achieve VPN connection with PIX and VPN 401..ANy pointers?thanks in advanced.

Hello, i have a pix 525 with several vlans. Some are public, others are private (NAT) networks. I'm having problems with my ISP dropping the connection because some of my clients are opening too much new connections/sec. Can the PIX throttle this con...

Hi All,I would like to know which all ports are opened from outside to inside of a Pix.Coz I have an access-list like this; "access-list acl-out permit ip host 192.168.10.100 host 172.16.1.50"Now I have to open a port 7001 in our pix from the outside...

I am new to pix and i need support in this forum.My query is i have three machines behind PIX.192.168.2.150192.168.2.12192.168.2.110My ISp has given 6 useable ips /29. Out of 6 useable ips one ip is assign to 192.168.2.150.I would like to use 2 publi...

I have an ASA5510 and have it configured with the STATIC NAT entries for Web servers in MY DMZ but when I add the DNS to the end of the STATIC rule it does not modify the DNS reply so that the nat'd address is sent to an outside client. I have done t...

This seems pretty juvenile, but how do I allow traceroute from the inside to the dmz. My access list has only the implict rule to allow all higher secured interfaces access to lower secured interfaces. So, all traffic from the inside is being allowed...

All,I am getting this error message on my Kiwi Syslog:Pix-3-106011: Deny inbound (No xlate) udp src inside: 10.5.5.1/161 dst inside 10.232.2.1/2858I am pretty sure this my device is sending SNMP packets over to my network monitor server.Any help woul...

one of my student changed login info on our lab vpn concentrator 3005.how to reset the login name and password ?the version is 4.1.7.thanks

Hi,We need to send the access_log from our squid servers to the MARS.The squid log file is in Apache normal log file. For example, a line will look like this :1.2.3.4 - - [24/Nov/2006:17:08:59 +0100] "GET http://www.club-internet.fr/? HTTP/1.1" 200 2...