Network Security

Hi!I have two ASA 5520 and i wonder if the following failover configuration is possible. Can i use the management 100 FE interface for sharing regular and stateful failover. If so we have 4 Gigabit interface to use for other tasks. Or do i have to us...

Hi,I have packet captured showing all of my GRE packets with an IP PREC of zero, and the internal header marked IP Prec 5. Every document I've read states GRE copies the internal header upon encapsulation. I've removed every QOS except the LAN inboun...

I've just upgraded my Cisco Pix from 6.2 to 6.3(5), but now I'm trying to upgrade PDM from 2.0 to 3.0 and every time I try to tftp the new PDM file to the firewall it looks like its installing and then I get an error stating " No PIX image found in d...

Having a problem here on a 506 6.3(4) that the user says popped up out of nowhere one morning with no changes having been made to the config. There is a 506 a layer 2 dumb switch, and then 1 internal server hanging off this switch. the PIX can ping t...

Hello!I have got one question about the purpose of IPS licence. If I correctly understood, licence should assure you to obtain signatures, so that means if your licence expires, you will not be able to apply signature to the sensor. Am I right?I try ...

Good morning I'm writing you because few days ago the Cisco Pix appliance, installed on the network of my Company, had a crash.Few seconds before make statefull fail-over (with the standby unit), I could capture the last log messagges and I send you ...

I have a recently re-imaged 4255 sensor with V5.1.1 installed. The sensor app continually dies for no reason and I am constantly having to login with the SA and restart the cids process. Any ideas/recommendations?

Hello,I'm debating whether to go with a 515e PIX or 3825 router w/ FW IOS. What does the PIX offer that a FW IOS cannot do? I am leaning toward the 3825 because I am much more familiar with IOS. Thanks!

Hi,I have a ASA5520 with one internal, one DMZ and two outside interfaces to be connected to two separate ISPs routers.I would like to use both ISPs for internet traffic in one of these ways:A) Route traffic based on source IP (separating desktop and...

I have a network setup as follows:-Internal 220.0.0.1VPN users pool 172.20.0.0We can connect via VPN and see internal network.I want to enable split-tunnelling.I have the following IPSec Rule setup:-ProtectTunneling Policy ODynamic20Firewall Side Int...

I need to replace a pix 506E with an ASA 5510. Since the pix 506 can't be upgraded to pix 7.04ED software, is there a way to convert the pix config to the ASA equivelant? There needs to be a utilitiy like there is for the conduits to ACL's. Anyone ha...