Network Security

This seems pretty juvenile, but how do I allow traceroute from the inside to the dmz. My access list has only the implict rule to allow all higher secured interfaces access to lower secured interfaces. So, all traffic from the inside is being allowed...

All,I am getting this error message on my Kiwi Syslog:Pix-3-106011: Deny inbound (No xlate) udp src inside: 10.5.5.1/161 dst inside 10.232.2.1/2858I am pretty sure this my device is sending SNMP packets over to my network monitor server.Any help woul...

one of my student changed login info on our lab vpn concentrator 3005.how to reset the login name and password ?the version is 4.1.7.thanks

Hi,We need to send the access_log from our squid servers to the MARS.The squid log file is in Apache normal log file. For example, a line will look like this :1.2.3.4 - - [24/Nov/2006:17:08:59 +0100] "GET http://www.club-internet.fr/? HTTP/1.1" 200 2...

I have a webserver(192.168.10.2) on a DMZ network off of a ASA 5510 7.1(2). It needs to communicate with a MSSQL server(10.10.4.48) on the internal network. What ports, if any, other than tcp 1433 do I need to allow this to happen? I have tried tcp14...

We have a PIX with 3 interface, 1. Inside, 2. Outside, 3. DMZ. In the DMZ there is a VPN Concentrator which has a site-to-site VPN with another site. How should I write the nat statements so that all VPN traffic is not natted, but everything else is....

Good Morning,I will preface this with the fact that I know that the network needs to be redesigned. This is not my animal, I have just walked into a disaster. Re-design is not possible at this point, but some secutity is needed. The network is compos...

I am currently reading up on this and have a few queries: -1)what does in-band & out-of-band mean?2)what will NAC appliance do out of the box?3)how is it integrated with Active Directory?4) Where can i get a good resource on deployment and configurat...

I am using a FWSM in transparent mode on a 6509 and I am running into issues using the Microsoft VPN client with NAT. Currently, I have NAT setup on my router and when I try to VPN to an outside VPN server I cannot get authenticated. If I try the sam...

Hello!I saw on Cisco.com that problem related with HTTP inspect ha already been resolved on release 7.1(2)http://www.cisco.com/en/US/products/sw/secursw/ps2120/prod_release_note09186a008062560f.htmlResolved Caveats - Release 7.1(2)CSCsc51939-Correcte...

Hi,We are in the process of migrating from 506e verion 6.3 to a 515e Version 7.0(5). We have everything up and running now except for one remote site which is on a 172.16.0.0 network and connects via ADSL to an ISP then to an IT company who say they ...

We have five failover sites that are connected to the main site via the Internet. They are configured with IPSEC and a gre tunnel for end-to-end connectivity to the remote site. Two of the sites have wireless DSL at the remote end and they will not s...

I have just upgraded my PIX 515 to 7.1.2 and now my VPN tunnels connect but they do not allow me to see any of my network. They worked fine with 6.3.3.It seems to be either a routing issue or a ACL issue as I can create the tunnel but I cannot access...