Network Security

The PIX is cofigured with no nat-control.When traceroute/tracert from PC to the server behind the PIX. The server reply but the missing part is the PIX interface do not reply at all. it just passd thru.How to get PIX interface respond to the tracerou...

Hello,I need some real-life facts about VPN 3000 concentrators running more than 1000 concurrent IPSEC VPN-RAS sessions. We are seeing very high CPU utilizing with limits about 100% at 1600 concurrent sessions on a VPN 3060. The question is what can ...

HIDoes h323 inspect handling configuration where h323 setup comes outside to inside or inside to outside, but GW where media stream is negotiated is placed behind the third ASA interface ? See attached topology picture.rgds,Ismo

I'm upgrading an IDSM-2 from v4 to v5. Do I want to use 5.0(1) or 5.0(1a) as a step to 5.1?

Hi,I get the attached error message when I try to add a device (ids-4215)to the IEV 5.0. Is there any dependencies for java certificate for this IEV sw ?regards rolf

I found many fram drops:gpix# sh asp drop Frame drop: Reverse-path verify failed 282 Flow is denied by access rule 619 Out of flow cache memory 102 First TCP packet not SYN 813 TCP failed 3 way handshake 254 TCP RST/FIN out of order 44 TCP SEQ in SYN...

I have the following config:global (outside) 2 CLIENTA_NAT_ADDRESSnat (CLIENTA) 2 0.0.0.0 0.0.0.0Where '0' indicates all networks - Yet for some reason, one of the Subnets connected to the CLIENTA VLAN was generating the following error:No translatio...

I am dealing with 2 domains owned by the same company. DomainA and DomainB are connected via pix 501s ipsec tunnel. Right now all the tunnel is being used for is passing mail. DomainA has an application that need to communicate with the workstations ...

Hi,We have an ASA-5520 that is use for our remote VPN users and I've set it up with multiple DMZ interfaces (vlan). There is a Microsoft-ISA server between the ASA and our internal network and this ISA has interfaces that matches those on my ASA serv...

FTP client request cannot a connect to FTP site. Looks like the FTP client display says connected, but after 45 seconds the client retries to connect. FTP FIXUP 21 is enabled.FTP site admin says it's passive FTP. We are making the request from inside...

I have recently had an application move from one server to another. Is it posibble to simply redefine the "names" statement to use the new IP address?eg: previous statement;name 10.1.1.1 WEB_SERVERproposed statement;name 192.168.1.1 WEB_SERVERThis wo...

Can I connect 2 different ISP's to my ASA by creating 2 different "outside" interfaces?If possible I would like to dedicate my existing T1 for email and use my new connection for browsing. Also I have my existing T1 connected to a Cisco 2500 and rega...

We have a VPN 3005 Concentrator, ver. 4.7.1. Is it possible to enforce a Cisco VPN client has the latest antivirus (AV) installed on the workstation or laptop? For example, if the client does not have AV installed or does not have the latest AV defin...

Hi,I have a serious problem since a few days i do not manage to solve.Firewall PIX 515eI have not modified my config. since a long time now; except yesterday i had to open a port to make a specific service works; probably nothing to see with my probl...