Network Security

I have a situation where I need to nat from our VPN Pool to a specific address on a dmz interface and use PAT to the DMZ interface IP.Here is what I came up with, but does not work:ip local pool vpnpool 192.168.200.5-192.168.200.250 mask 255.255.255....

Hi,Is it possible to use the extra port of the ASA5510 with base license upgraded to enhanced license to for a new OUTSIDE segment network that will NAT to a new internal VLAN network, the 3rd interface of the ASA is running trunk. Say 10.10.X.X(new ...

I know this is possible, but I just can't figure out what the config would look like. The goal is to be able have a server farm inside a firewall answer requests that are destined to 2 different IP blocks during a migration period. The internal serve...

Could someone point out an advantage/disadvantage of either of these two approaches to deal with mtu path discovery issues. (1) The first one is to allow the 'packet needs to be frag'd but df set' through the use of an acl. (2) The second is done thr...

Should we always need a static st. combined with ACL when connection is initiated from inside network. For example if am initiating a http connection from inside network then for the response http traffic should i need a static+ACL st.

I have PIX 506e with software version 6.1(4). By default access to PIX is diabled. But I want to give access to the perticular single IP to the PIX. What commands should I configured on PIX or how should I do?

Hi, We have ASA 5510 with ISR router. ISR router is having 2 internet link from same service provider and 2 pool of ip address for 2 intenet link. One is 512 and another is 2MB link. VPN traffic is going via 2MB link aand Internet Link is having 512K...

Hi all,We have 2 firewalls in our network. The internal firewall is a FWSM with inside and outside interface and all the NAT is performed on the FWSM. The DMZ exists on the external firewall. DMZ uses all public addresses.I am in the process of putti...

Hi,Currently i'm having trouble with this type of thing, my customer complaint that the PIX doesn't stop the threat, they have set emb_limit, max_conn, ip verify. And also when show ip audit count, large icmp is very high, is this a good news because...

Hello,can someone help me I'm running 7.1(2) on PIX 515E UR and my access-list is denying port 8888 eventhough I have it open up is there a bug in the software for that port. Here is the access-listaccess-list dmz_access_in extended permit tcp host A...

Hi,I have 2 Cisco ASA, configuring in failover. In the primary unit, I can see:his host: Primary - Active Active time: 3349739 (sec) slot 0: ASA5520 hw/sw rev (1.1/7.1(2)) status (Up Sys) Interface outside (192.168.29.203): Normal Interface inside (1...

Good Morning allI'm having an issue with an internal ipsec tunnel between two pix's. The tunnel is built between two outside interfaces but the packets are being dropped at the inside interface with a no traslation group error, despite having the cor...

Hello,Is it possibly to measure the throughput for the tunnels setup on a pix 525? We need to verify by how much need to bump up our WAN pipe.Thanks,Stefano