Network Security

I am seeing lot of 0 Bytes packets in 'Show connections" output of the pix. Servers behind pix are internet web servers and firewall is internet firewall. I belive 0 Bytes packets are threat, but not sure whether the packets are sent by the servers t...

Any idea why generating a simple configuration for a single sensor takes more than 1 full minute? The whole process to make a sensor config change is slow at best yet the server is showing 1.2 GB free mem, procs are running very low, yet this proces...

This question gets asked a lot in this forum. I got this link off Cisco's website...I'm not affiliated, I just thought it might be helpful. When Cisco says you need a 3rd party solution for this...this is what they mean:http://www.csc.shoremicro.com...

Hi,Can somebody tell me what I will need to setup a labs for NAC II.I have a catalyst 2950 switches.Are they already included in the NAC framework or do I need to upgrade the image, if so which image should I download.Will and upgrade be also necessa...

The certificate on my 3015 concentrator is due to expire in a couple days. When I try and renew it, it prompts me for the pword for the cert. I have no clue what that would be. What else can I do to renew it ??Thanks for any relies !!!

Hello!I have a question about routing function in ASA 5500. scenario: The asa (inside int 192.168.1.1) acts default gateway for all inside nodes. We have also another network on the inside (192.168.2.0), can the asa route traffic to this net via only...

Need to test this scenerio.Internet via DSL Westell with ISP assigned static IP.Two PVLAN's for two different vendors connected to ASA device. Vendors need to VPN into their perspective PVLAN's. When vendors are on site, they will need to be able to ...

Dear ALL,I need your comments about topic I'm going to explain (ping between hosts belonging different interfaces):pix 6.3route 0.0.0.0 0.0.0.0 192.168.104.201 (router)outside is 192.168.104.200 255.255.255.0host into outside is 192.168.104.20 (defau...

I'm in the process of testing a remote access VPN setup, hopefully soon to deploy. I've noticed that the encrypted group password in the .pcf files are different (for the same password) for Linux and Windows. I don't have a Mac or Solaris test box,...

Hi,I'm trying to find why my PIX is breaking a media connection from an outside host to a public web server. I have added 2 ethereal files. On us from the inside, one from the outside interface of my pix. In packet 96 in both files, the payload is di...

what type of logging should i turn on to find out why my PIX 515 version 6.3.4 keeps failing over?Here are the loggs i have so far:104002: (Primary) Switching to STNDBY - switch to failed state104003: (Primary) Switching to FAILED.105009: (Primary) T...

Hi,Please help me to configure the IDSM-2 with the IOS 5.0. Please provide the step by step instructions to configure the same. If you give me an url also is vry helpful.Thanks in advnace.Regards,Ram

Hi,Is there a limition for number of connection in Pix firewall? If so, what happen if the pix reachs the limition. It seem to my pix (PIX-515, 32 MB RAM)cut the connection to the Internet every time it gets to busy.Tanks a lotSfanayei

Hi,Can't find the LNS config directives those will lead to get complete(!) vpdn profile from radius.The configuration is:LAC-LNS/PE-LNS/CELNS/PE - provider edge lns that we want to configure using radius profile for vrf-aware multihop vpdn so that in...

HI When +/- 800 PCs do a DNS lookup for a domain that does not exist to 8 regional DNS servers which in turn query 2 main DNS servers, the amount of connections for 1 of the DNS servers on the PIX arein excess of 75000 connections, killing the CPU of...