Network Security

Just received a new Cisco 871W to replace Pix 506E (firewall + SiteToSite VPN). I downloaded new IOS that supports multiple Vlans and installed in 871W. I try using ASDM express to config the router but i was unable to copy or match config form pix t...

Why is it 1G ? what's purpose ?

We're trying to remove all the ACL's that have hitcnt=0 from at least 3 Pix firewalls.There are hundreds of lines and it's a waste of time to go through each one of them.If I weren't so rusty at programming, I could've written a program to do this bu...

In the 4250-sx, there is a copper gigabit interface (ge_0/0) and a fiber gigabit interface (ge_1/0). Can these interfaces be paired together to do blocking or do they have to be the same physical type. What are the disadvantages, if any, of pairing o...

I have been seeing lot of request for Firewall Log Analysis software in these forums. Interested folks can give ManageEngine Firewall Analyzer (www.fwanalyzer.com) a try.

HiI have 1 pix 515 firewall.I know pix has default one inside and outside port.now I want two inside and outside port for two inside network and connect two outside ISP line.it is possible ?. if possible then how ?.Thanksbiplob

I was working on a pix today that had its internal interface connected to heavily used server segment. After adding a static translation to the pix, the server segment started having issues. Think we are thinking that after adding the static, it turn...

hi , i hv a pix 515e wit UR bundle and another pix with FO bundle. I am able to ping the interfaces of the pix with UR bundle. Bt the same configuartion isnt working with FO bundle and am nt able to ping the interfaces. I am attachingthe text of both...

Is it possible to have client machines inside a PIX sending dynamic dns updates to an AD/DNS server outside the firewall when using NAT? If so, is this supposed to be handled by the normal dns fixup/inspection, or does something have to be specifical...

I have problem with nac 2 and acs 4.0, this is the conf in the switch 3560:aaa new-modelaaa authentication login default group radius localaaa authentication eou default group radiusaaa authorization auth-proxy default group radiusaaa accounting netw...

We are seeing events triggered by this signature that appear to be invalid. SSH2 connection attempts appear to be triggering these events, when the exploit is clearly for SSH1. The signature is utilizing the SSH1 engine, but ssh1 is disabled on the h...

Hi,I'm in the process of upgrading my PIX515E from 7.0(2) to the new 7.0(5) image.First of all i've upgraded ADSM to the 5.05 version from within the ASDM itself via Tools > Upload Image from PC, and overwrite the current file.Secondly I tryed to do ...

Any cisco experts can tell exactly how long will the pix active and standby switchover take. It seems too long.

Hi There,I'm implementing PIX 525 FW in my network and I have a setup as follows:100 Mbps internet link, a web server DMZ where I have 4 web servers, an application DMZ where I have application servers, and a DB DMZ where I have my DB servers. I'm ex...