Other Security Subjects

Hi all.My Customer has moved a public server from the inside to the dmz and want to be able to access the server using its domain name.Here's the config I have proposed: ip address inside 192.168.204.1 255.255.255.0 ip address dmz 192.168.210.3 255.2...

I have a NAT address that I would like to apply DNS rewrite to. For example, 192.168.42.1 on the inside interface is accessed by going to 192.168.100.1 when on the outside interface. If I have a DNS server on the 192.168.42.0 network on the inside ...

I have two PIX 515E in failover.I want to install these pix 515E with one DMZ . So i must define a DMZ, a inside and outside network segment.1/ To define these segment i use VLAN and trunk port on catalyst 2950T2/ I use one switch for DMZ, one switch...

I want to set up a 3005 so each IPSEC tunnel (lan-to-lan) cannot communicate between each other in any way, but hosts on the private side of the 3005 CAN communicate to all of the tunnels.I was thinking of enabling NAT on the tunnels, that would ens...

Hi,It looks like in v4.0 of the sensor there is no any settings for PostOffice as it was with v3.0. Does it mean that Cisco is moving from old NetRanger concept, or PostOffice protocol will be added later in v4.0?Thank you

Hi,Does anyone have issue with version 3.6.7F and VRRP setting ? It will not let an "IPSec over TCP" client to make a connection to a Master that was a Standby device.Just want to verify if anyone else have the same issue.Regards,Engel

I have two internet lines and would like to split traffic between the two. One being for web/email the other being for VPN. I assign the relevant IP address to each and can configure one side to work fine. However I cannot get the other side to work....

Hi,I have this ethernet0 interface shutdown. How do I say no shut for it?Thanks for your help

In regards to the line-card module: IDSM 3.What does sig 993 quantify specifically when it is reached and 1 packet is missed; and then when 100% of the packets are missed.By quantify, I mean, specific numbers in relation to line-card overhead or cpu ...

When the EventViewer of CSPM is launched two dialog boxes are showed in the screen:Message #1Event Viewer ErrornrEventBrowser>processContext, deriveContext failedMessage #2deriveContext, non-hex-ascii found in outguing contextWhat does it mean?Thank...

hi,i try to configure a cisco 827(configure with nat) for ip nat traversal . a vpn client behind this router can establish a vpn connection to remote pix.but i can't ping any device behind the pix (doing also nat).here my configuration on the cisco r...

Hello. Does PIX performs ASA and stateful application inspection on traffic that is going through GRE tunnel. Our customer want to build IP tunnel through PIX to pass routing information from dmz to inside interface. But I think that it can decrease...

Hi Everyone,I'm pretty new to this technology and still in the process of learning. The boss asked me to upgrade our current 3.6 software to the latest one, 4.0.1. The document is pretty straight forward;however, the clients are still running 3.5. We...