Other Security Subjects

I have a 1841 currently configured for firewall and NAT. I have a HWIC-4ESW module installed. What I would like to do is configure one of the ports on the module as a DMZ for a mail server. How would I best go about this? Thanks.Cisco IOS Software, 1...

I've just set up an 1841 router on our network using IOS and I wanted to try out the new SDM application. I've downloaded the software from the website and tried accessing the router. I get authenticated but then the application asks to run Cisco App...

Has anyone done split-dns with an IOS router acting as an easy vpn client back to a headend vpn3k? I think I have the syntax down but I'm unclear whether the dns query from the clients are transparently intercepted and responded-to by the router or d...

Running FWSM 3.1Need some advise on how I perform a static NAT and then Globally NAT the source address. Basically, I need to provide the following NAT10.1.1.1 -> 10.1.2.1..where 10.1.1.0 is the outside and 10.1.2.0 is the inside. However, I'm rout...

Hi all,I have problem with ip inspect. I have Cisco 2811 connected to 8Mb/s line with this config (only important parts):ip cef!!no ip bootp serverip domain name cebia.czip name-server 80.95.96.7ip name-server 80.95.96.11ip inspect log drop-pktip ins...

Hi I have a Cisco 3015 concentrator that seems to generating the following error twice every minute:Subject: VPN3000 Concentrator Alert (dial)366107 05/23/2005 11:37:56.480 SEV=0 PSOS/2 RPT=143257 q_send(1179648)failed: 0x0035Can anyone explain the ...

What is the External port for on a concentrator?

I have installed a CAM and CAS server running 3.5.6 with an evaluation license as an inband server. Clean access agent 3.5.9 is installed OK on the client and is working fine. Im trying to add a new AV rule to the Agent but the following is listed i...

I have a site to site tunnel with a remote office. Remote end is an ASA 5510 and the coporate end is PIX with version 7.2.1(4). The remote end needs to be able to use its ISP provided DNS server for all their traffic headed toward the Internet, but...

I have a customer who wants a stateful packet inspection firewall that will be responsible for controlling outbound traffic for internal users. They have a separate firewall that will deal with blocking inbound traffic. The want the ability to make...

HiIs it possible to locate "active directory server" on dmz and domain users in inside interface ?If it possible can you tell me more ?Thanks.Best Regards bahman mozaffari.