Network Security

On the PIX I have "ftp mode passive" & "inspect ftp" enabled. I also have an OUTSIDE ACL rules allowing access to the ftp-server which eq ftp & ftp-data. In my efforts to get passive ftp working, I also have a DMZ ACL rule allowing the ftp-server a...

We have a user that can't view the network with the VPN. He connects with cisco vpn client, other users also connect with out a problem.The gold padlock is closed, but can't view anything.He also get IP address from the pool.But from the log we get a...

I have to push csa on 1000 desktops can i integrate it with AD to force the csa on reboot. Or is there any other easy way to do this. Kindly reply.

We are experiencing some issue with this, Luckily these users are in test mode but in a couple of days they will be deployed to live.If you see below this is the alert, Do you think its o.k. To create an exception rule for this. What are your thought...

Just a quick question, can we do port forwarding with a Cisco PIX 506 firewall? If so, what would the command be? Thanks

Hello,We are using a PIX 501 behind a DSL modem. We have a single public IP address assigned to the outside interface of the modem, a single private IP address on the inside interface of the modem and a single private IP on the outside interface of t...

Hi allI have the same problem as many other, with internet access via a VPN client.It's solved by folloving the "internet on a stick" conf examble.BUT --- it gives a lot of errors in the log like :305005: No translation group found for udp src outsid...

Hi all,I just got an ASA 5520 VPN Plus and I'm having trouble blocking p2p and im programs.The problem is when I block p2p and im programs, no other web sites work. Here is my config below.ASA Version 7.0(1)names!interface GigabitEthernet0/0 nameif ...

What's the equivalent PIX7.0 command for the PIX6.3 command 'debug packet'

Dear all,The pix515e is configured with one public ip on the outside interface,and PAT configured so inside users can access internet.our mail server and web server is registed with isp.currently the mail and web is running on same server.i can send ...

It seems that the newer 7.0 ASA/PIX OS does support the inspection of the Gnutella protocols like Limewire. The older PIX OS clearly stated you had to use NBAR to filter it out. But I see no mention of anything other than Gnutella and wanted to ensur...

I have an issue in that we have a pair of Pix's (version 6.3) and a router plugged into a switch. The firewalls are ours and the router is a customers. We have static routes on the firewall to the customers networks off their router however if the li...