Network Security

Hi,I have Cisco 877W ADSL router installed in front of Cisco ASA 5510, this router terminate Remote Access IPSec VPN tunnels. The PIX does not do NAT since the router do that.I can access the management IP address through inside, but when i connect u...

Hi,I would like to understand how pix do the firewalling, ie. a Packet from inside go to outside (webserver), the nat and global are done and there is an outbound filter for inside allowing http.Which will be process in the pix, first look for ACLs i...

Hello,I have the current following config:Internal Lan >> Cisco 2660 Router >> InternetRight now the 2600 is configured for NAT and everything isworking great. We also have 1 Exchange 2003 server on our internalLan which is also working fine.I am pla...

Hi,I have a Cisco ASA 5510 and couple of webservers behind it. For some specific applications, those webservers call the website hosted on the same box. The appliance sees that as a Land Attack and gives the following error:Deny IP due to Land Attack...

I'm planning a small VPN network with about 20 remote Windows XP clients. These machines will be unattended, and I need them to automatically establish and maintain the VPN connection. I have not used the Cisco VPN Client before, so I am very curious...

I am doing QA on an IOS and I need to verify the following:http://www.cisco.com/en/US/products/products_security_advisory09186a008055ef31.shtmlAny help will be appreciated.Tey

I have been setting up a MARS appliance on our network lately. Right now it is only receiving information from a few IPS'. Now I'm getting ready to set it up to collect netflow. I just found out that we have a Cisco Netflow Collection Engine (don't k...

Can anyone offer any assistance as to how to get out of the following mess?First of all some background:We remotely manage a PIX525 (IOS ver 6.3(3) and PDM 3.0(4)) and we usually use the PDM to make day-to-day changes, as the junior staff are more co...

I have configure my Primary PIX for failover to no avail, when I power up the secondary firewall it goes into active state. The two firewall aren't syncing sho failover on primary shows secondary firewall in failed state and visa versa. here is a cop...

I am just wondering if I have missed some safety features that come with the ASA 5510 that would cause the DEBUG not to stay up (such as debug icmp trace). I am running ver 7.0(4) in two of our ASA 5510s and found that the Debug command I issued woul...

i am working on cisco IDS 4250. its web server is running but still i am unable to get the device manager view in the remote browzer. there is also a problem in the following commands. when i typr the following command. error appear ..sensor(config)#...

We have a couple of IPSEC/TCP connections between 3005 and 3002. Tunnel establishment works fine. The problem is that we are unable to initiate communcation from the 3005 to the 3002 which makes remote monitoring of the 3002 impossible. From the 3002...

I'm see'ing a weird effect here. I do a traceroute to a website from inside an Pix and a couple of routers on the internet show latency of 600+ ms. However from my border gateway outside of the firewall I don't see the latency on a traceroute in the ...