Network Security

Hi,I am planning to deploy the cisco ASA 5520 Active/Active configuration. What are the compulsory modules that i must order for. Is the SSM an optional module or it is compulsory.RegardsNahas

I have a webserver connected to the integrated switch on the back of PIX 501 with an IP address on the same subnet as the outside interface. I want to NAT 0 the IP address so that I can have the public IP behind the firewall. I have enabled NAT 0 for...

I wonder if a pix 515 can act as a http proxy ? If yes which command i have to use to enable http proxy.Regards

Have a PIX520 in the main building and PIX 501’s at remote sites via DSL over the internet. Ipsec tunnels are working fine from inside-to-inside. I can also make remotes talk to the Main PIX dmz interface via a tunnel. The problem is coming from o...

Hi, I'm new with Cisco Pix Firewall 515E and I'm starting for beginners. Let's my first configuration, my lan (inside) work with internet ok but I don't understand why my Dmz configuration doesn't work, this my part show running-config without pubbli...

I've been searching for an oid, or some way to collect the 'xlate count' data with snmp. I could setup a script to do a simple 'show xlate count' but I would love to just simply use this with MRTG. Anybody have any ideas? I wish cisco would add th...

Hi,I have a firewall (515E) with 3 interfaces with OS 7.0. To the outside interface we have a router conected to 1 ISP for internet and to the DMZ we have another router connected to the 2nd ISP for internet.The inside interface is connected to a swi...

I'm not terribly familiar with PIXs, so I'll try to explain. I have a PIX 501 with two tunnels going to different firewalls in Europe. I currently run 6.3.3(132). One site in Europe has a basic ping monitor that checks a server that resides behind...

Hi,I've got this annoying 'issue'with PIX running 6.2.2. When I do traceroute to a destination that are outside the PIX, the pix reports the destination address as intermediate hop address (see hop 4 below). So, from the example blow, if the destina...

I have a Pix 515E running IOS version 6.3(1). It is acting as the dhcp server for the LAN connected to its inside interface. We just installed a new router on that LAN segment, and we want the new router to be the default gateway for the local work...

Hi,We are having problems in adding Cisco IOS IPS (Running on Cisco 1701,12.3(14)T2) into IPS-MC (Version: 2.1.0).The IPS MC is able to create the Trust Point on the Router and the Router is also able to download the IPS-MC certificate chain. However...

What is the best way to configure a VACL for packet capture on a pair of switches running HSRP for a respective VLAN? If you have the same VACL on both switches and a capture port on each connected to a different monitoring port on a Cisco IPS Appli...

Hi,Need help on this as I'm newbie in PIX.Have gone through the doc but still cannot get what i want.Lets say,Inside Interface : Internal NetworkOutside Interface : Public NetworkDMZ Interface : DMZ serversVPN Interface : connected to VPN Concentrato...

Hi,I'm facing a strange problem with Pix515E-R. Default is version is 6.22. I upgraded with 6.3(4). After hard reboot Pix is not able to load the IOS and im not getting the rommon mode also. Can anyone knows about this why it is behaving like this an...

When I log into the PIX via the ASDM launcher - the home and monitoring screens are blank, no graphs, no traffic status, no monitoring options - nothing. If i click on the configuration button - everything works as it should. I have tried re-loading ...