Is there a way to creat a rule to allow NFS through the FWSM? From what I understand about NFS there is a complication with the port mapper and the dynamic UDP ports.
Please could somebody explain what "paranoid Keepalives" are? Alos when we do a debug we see the following:-"peer does not do paranoid keepalives"Why do I see this output and the Ip-Sec connection still establishes?
Hi,I am installing a FWSM module on a 6509 catalyst with a 720/MSFC3 supervisor, I am actually running 12.2(17d)SXB11a version in the supervisor and I would like to install the 3.1 software version on my FWSM (specifically the 3.1(7) release).Accordi...
hello all. running 7.2(2) on an ASA5510. in the Cisco documentation here:http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/c1_72.html#wp2032432it seems to indicate that you can clear the counters on all your access-lists simultaneo...
I am a new computer support specialist in a small company. We would like to focus on network security. How can I verify the current connections on a PIX firewall? We would like catch malicious behavior while it's occurring. How do I inspect all t...
I have two asa5520s, version 7.2(2).I have use access-list for the firewall as:access-list outside extended permit ip object-group mydomain anyaccess-list outside extended permit icmp object-group mydomain anyaccess-group outside in interface outside...
Hi,We have a bunch of public IP addresses, on our PIX 525, which we have statically mapped to internal hosts (one by one) using the following command:static (inside,outside) 210.XXX.XXX.XXX 10.2.10.10 netmask 255.255.255.255 0 0We then use rules in a...
We have a PIX 506e that I'm setting up. Yes, I know it's old but it's what we have so we're stuck with it.How do I know what the latest version of the PDM is? I can't seem to find it anywhere on this site. Right now it's 3.0 (4).I'm having all kinds ...
hi,is it possible to create a lan 2 lan vpn with 2 isp router ?:LAN1---MyrouterCisco--ISProuter--Internet--Isprouter--MyrouterCisco--Lan2What i have to ask to my isp (what port to redirect?) ? do i need the isp router to be in bridge mode ?sorry for ...
Can anyone tell me how to install a CAS / CAM server for an existing Wireless LAN (WLC's) ? There is a document on the Cisco site for a NAC and WLC config, but that is a "real gateway" config. I would like to install a out of band "virtual gateway" s...
when setup a reverse ssh to console port, what is required to get this to work.I have in the router 16-port asynchronous/synchronous serial network with High-density 8-port EIA-232 asynchronous EIA-232 asynchronous. I have read some of the documentat...
I need to discover the neighbouring WAPS and would like to see the signal strength received from the neighbouring AP. Please let me know , which MIB exactly I should use to get these values.
I have a PIX firewall with various VPNs. One of these VPNs is configured without an ISAKMP policy, as such I assume it is using the Global Default Policy.DES Secure Hash StandardRivest-Shamir-Adleman SignatureDiffie-Hellman group:#1 (768 bit)86400 se...
I have a problem that is best shown in an illustration, which I have attached. Basically, we have a site-site vpn that allows a few machines on our private wan network to access a vendor's ftp server on the other side of the tunnel. The tunnel itse...
