Network Security

Which are the main differencesbetween PIX FW and the new ASA55xx ?Will the ASA55xx in the future take the place of PIX family orwill the two products coexist ?Which the criteria to choose between them ?Thanks to anyone will answer.Alessandro Asson

Hello all,I'm trying to configure a SPAN monitor session on a 7606 router. interface GigabitEthernet3/7 description to IDS01 SPAN Port no ip address speed 1000 duplex full switchport switchport trunk allowed vlan 4,5 switchport mode trunk spanning-tr...

I need some help configuring SSL packets forwarded to a webserver. The problem is that the pix is live and is already forwarding SMTP to mail. but we need to use the same ip which the mail server utilizes for SSL web.The xternal pool available isext....

hi,i have a PIX 525 with 2 FE ports and 1 Gig Port. I wanted to use the GIG as the inside interface. Is it possible to swap the Inside from Fe to GIG and used the FE for DMZ?regds,T Singh

Hi, that's the Problem:When I try to connect MSN it's not possible.I saw that on the firewall:---305011: Built dynamic TCP translation from inside:inside-ip/1166 to outside:outside-ip/55586302013: Built outbound TCP connection 75493 for outside:65.54...

When I am configuring two firewalls in failover, do I have to use three IP adreses per interface pair or I can go only with one, real one? Problem is that behind my firewall I have routers and I used 30 bits IP subclass. And now I want to add failove...

Hi All,We have been using Cisco PIX's for more than 5 years now, and vpn tunnels have been part of many configurations through time. Now I finally got brave enough and upgraded a pix to PIX OS 7.0.2 from 6.3(5)It was a mess to change the configuratio...

I have taken on managing a CSA MC with version 4.0.3.739 + 4.5.0.565 agentsI cannot upgrade the 4.0.3.739 agents to 4.5 because of the mandatory Windows System Module preventing any action to the Agent Service Control. If I remove the mandatory WSM t...

Recently i join a new company where i find very unstructured network we have three cisco catalyst 2950 one Cisco 2620 router, three 3com 4420 manageable switches and seimens wireless lan (Gigaset SE505 cable/dsl router / bridges) and few un-manageabl...

We have a VPN 3005 concentrator that connects to our backbone switch. We have about 6 sites who have the following subnet:site A: 172.16.x.x site B: 172.17.x.x (etc)When a user is at home, hotel, or directly connected to the Internet and they connect...

I want to redirect all http/ftp traffic through proxy server from the PIX. The proxy is 10.133.1.49 and PIX is 10.133.6.10. The default gateway for the hosts on the network is 10.133.6.10. Is my logic sound?

We have deployed Pix 501's to small remote offices. Most receive dynamic IPs from their ISPs, they connect to our 3005 concentrator here in our home office. The Pixes are configured using Easy VPN, and are in network extension mode. Clients sitiing b...

Hi Everyone, My understanding of a general PIX config is to have the inside interface connected to your LAN and the outside interface connected to the "Internet". Now I have configured the NAT to translate my internat 192.168.x.x address to my routab...

Hello, we are trying to place partner networks on discrete vlans on one interface of our PIX (PIX version 7).An engineer has been in and configured the PIX (see attached - pix7config)from looking at it I have the following questions:* Does it make a ...