Network Security

Why do we need DMZ interfaces? A document says that On the DMZ interface, we can install the servers that need to available for the public access and we should configure static nat.But I can do so on inside interface as well. Then why Security Levels...

dear sir, how can i know that firewall is working what are commands

Hi, do we have a signature for the blackworm, or instructions for creating a custom signature to detect it. (http://isc.sans.org/blackworm) Thanks.

Hi All,I have two PIX units for FO purpose; the 2 units have exaclty identical chassis but the only difference is in the VAC+ module where the primary has VAC+ module whileas the secondary does NOT. Would this affect me from going ahead and implement...

i have a setup of 3 routers 7609,3660 ,3745 cisco routers then second check is the cisco 4506 catalyst switches , the third check is juniper firewall and then the server zone or heart zone ,i want to place the cisco IPs after my firewall will it prod...

Hi All,Any idea on the maximum number of Gig interfaces in PIX 535? I have a PIX 535 with VAC+ card; it came with 3 built-in gig interfaces, I ordered 2 additional 1-GE cards but I can't find any place to place them in the appliance since the size of...

I just have 1 fixed global IP address, need to setup web server,ftp & email on different internal servers.Any good link how to configured on port direction.

Hi,Was unable to understand the various attributes described in the below cisco vpn concentrator log,3 11/04/2006 14:37:06.680 cisco-vpn-concentrator 15847SEV=4 IKE/119 RPT=371 nnn.nnn.nnn.nnn Group ] User <"user_name"> PHASE 1 COMPLETEDKindly explai...

What are the things to be concerned when migrating from PIX to ASA.

I am trying to implement two kinds of VPNs terminating on a Cisco router, with a static IP, running 12.4.6T code. The first VPN is from a Cisco Router (IOS 12.4.X) that gets its public IP dynamically (via PPPoE). The second is a Cisco Secure Software...

Does anyone know the MRTG mibs for IOS webvpn 12.4.(6)T.I already have the IPsec MIB: .1.3.6.1.4.1.9.9.171.1.2.1.1.0&.1.3.6.1.4.1.9.9.171.1.3.1.1.0

I have configured my pix 525 version 7 to forward multicast traffic using the the multicast-routing command. This enables pim-sparse on the inside/outside interface by default.An RP has been configured (lives on the internal network) with a access-li...

Hi,I'm looking at setting up a large scale (1000+) client VPN system and I'm trying to understand the new QoS capabilities of dynamic VTIs. From what I have read, I believe I can setup both inbound and output service policies for each VPN user. What ...