Network Security

Customer has an interfaces subinterfaced into two DMZs. Sh int shows a lot of discard packets which don't seem to be related to physical errors. I ran a capture on the ASA but this all looks good to me. Does the capture not show what came in but was ...

Hi,I need configuration help for PIX 525 with PIX OS 7.1My scenario is like this:Firewall inside network 192.168.1.0 /24Firewall inside interface IP 192.168.1.1Firewall outside network 192.168.2.0/24Firewall outside interface IP 192.168.2.1I have to ...

hi guyswhat is the diffrence between the retired cisco exam 642-531 and the new one 642-532thanks in advance

In version 6.49, I saw the introduction of the parenthesis to some variables in the built-in rule:Pre-649 Example: @(system)649 Example: @systemNot all rules have parenthesis with their variables - just some. Is there a benefit to the use of parenthe...

If we want our user community to have a new profile added (.pcf file) to their local Cisco VPN client what is the best way to do this without have to touch every machine. We have Cisco VPN 3005 and various versions of the VPN client.

Hello everbody, i'am here for the first time and i hope you can answer my question. We have an ASA-Server and the Cisco Security Manager 3.0.1. After we changed some things in the manager we want to submit and deploy the changes to the ASA-Server. Ev...

I have an issue where I need to set up a site to site VPN with a partner company through a PIX. The partner company has a site to site tunnel with a vendor that is a duplicate subnet to ours (10.0.0.0/16). Can anyone point me in the right direction...

I don't what's going over here.I just bought this device and spent two days trying to configure the firewall but still don't get success. I can't block icmp traffic using access-list command but can using icmp command.All redirections don't work on t...

Hello all,I'm trying to upgrade the IPS sig's on an ASA5520 with a SSM IPS module. I'm trying to upgrade the system to 5.1.1 to further upgrade the device with no luck. I followed these steps provided by Cisco.com: 1. Log in to the ASA. 2. Enter e...

Is there any possibility that there will be a version 7.x release for the PIX 501 (and the 506) any time soon, if at all?The current security exams are based on ASA and PIX version 7.0. I only have a PIX 501 available to study with.ThanksAndy

Hi,I'm building a new firewall on version 7.1. Unfortunately, I had upgraded this firewall fro 6.3 to 7.1 before I have tried to create the crypto maps. I need to create static site-site VPN and it seems that the command "crypto map" has been replace...

http server enableconnect to it (its the gateway) but while there is a server it appears to have no content eg https://192.168.1.1/answers https://192.168.1.1/admin/index.html not foundI'm stumped :( , helllp

Running PIX 7.0(1)5On one of the Ethernet interfaces constant overrun errors are being reported and packets are apparently being dropped. There are no other types of errors being logged. The speed and duplex are matched to the switch port and there...

i have configured the basic configuration in the aip ssm module.i have given the ip address and default gateway pointing towards vlan ip.i am not able to ping the ips ip from the lan and even from my ASA box.