Network Security

HiI have installed ASA 5520 . It is configured for 4 interface outside, inside wanzone and dmz. The security for inside is 99 and for dmz is 90 . There is a permit ip any on both dmz and inside interface. i have done a nat 0 on inside interface and a...

I have 3mg DSL running client 4.06. I have a very reliable and consistent 2.6mg actual bandwidth. My VPN account is set to terminate after 4 hours of inactivity. The tunnel drops at 5-8 minutes. If I start a continuous ping to an ip on the same LAN a...

When upgrading a pix 506e can you tftp the file through the tunnel from another secure site or does it have to be from the outside?

In a VPN cluster when the exterior interface fails/unreachable the VPN tunnel fails over as designed.Question: Is there a way to configure the interior (lan side) interface as a critical interface (i.e. the the interior interface fails the VPN device...

Many thanks to the guys at the SANS Internet storms centre for this “heads up” on this one. Is there a Cisco signature that identifies the vulnerability for this exploit? www.computerterrorism.com/research/ie/ct21-11-2005Original Reference: http://is...

dns_inside----pix-----userdns is at the inside subnetuser is on the dmzdomain controller on the inside subnetobservations;1. with nat (inside) 0 0 , the user could logon to the domain, but couldnt brouse any machine on the inside.2. with nat (inside)...

HiWhere can I find the full signature list in IDS 4215 and their enable/disable status?I tried http://www.cisco.com/cgi-bin/front.x/ipsalerts/idsAllList.pl?CUR_PAGE=2But I cant send the info to the customer since it requires login and it does not sho...

Dear All,I'm trying a PIX' configuration where inside address is 192.168.1.1 but in the same LAN will be public addressess.Please, which commands are needed in order to "move" those public addr. to the outside (route and nat I suppose). Regards Alber...

I get the following error when I try to open an ip log [created by changing the event action to log packets]."The capture file appears to be damaged or corrupt".Is this a known issue?

I have a PIX 515 in Active\Passive failover on PIX 7.0(2). I have disabled monitoring of several interfaces with the "no monitor-interface" command as they are not in use. When checking failover on secondary firewall all interfaces are being monitore...

I've read the 5500's do not support VPNs whilst in multiple context mode - Are there any workarounds for this?

I want to setup my PIX so I can VPN into the PIX and gain access to internal network resources. We have an odd set up as there are 3 interfaces on the PIX. Inside, Outside and VPN.We just added the VPN ethernet card to the pix.Right now, our inside i...

I am trying to use the Auto Update Server to update my firewalls, but it is not working. When my pix 501 tries to get its updates I get the following error in the 501's log: Error 612003 Auto Update failed to contact: https://10.10.5.6/autoupdate/Aut...