Other Security Subjects

What are the configuration requirements to allow access to an inside FTP server from the outside? Does this work for passive mode?FTP fixup handles the related connections and fixups for inside clients going to outside servers, but does it do the sa...

Is it possible to setup VMS on a server with an Oracle DB as its backend?

Hello,I have a VPN Concentrator 3000. Under Certificate Management" --> "Certificate Authorities" section of VPN manager I noticed that I have three authorities. One of them is called "For VeriSign authorized testing only. No assurances (C)VS1997"...

Hello I have a few questions on the CS-MARS. We just purchased a model 100 and are in the process of setting it up. Currently we have netflows from our borders flowing to it along with some data from snort sensors. In the future we will be sending ...

Try to connect to the outside interface of the Admin context using SSH even try ASDM with no luckGet the following with sh connTCP out 10.101.0.89:61845 in 192.168.2.3:23 idle 0:00:05 Bytes 18 FLAGS - Bs

HELP REQUIRED can anybody advise me on what ports i will need to open on a pix firewall that will allow me to join a computerthat resides off of a dmz interface (security level 50)to a domain whose domain controller resides off of aninside interface ...

Hi,I have created dummy rules to drop any events that is rated as normal activities such as when switch interface status changed to up/down everytime users on/off their PCs, or when firewall translation is expired once the connectivity/sessions is te...

I know stateful feature allow return connection from a low security to high security , it's seem same as "established" command http://www.cisco.com/en/US/products/hw/switches/ps708/products_module_configuration_guide_chapter09186a0080577c3a.html#wp10...

I am trying to use the PIX strictly as a firewall (no NAT). However, when I attempt to add an inside ip address to ethernet 1 (for example 12.x.x.65 255.255.255.192) it errors out with "Interface inside ip address or netmask not valid". I've got th...

Hi Amrit,I have a simple configuration, a DSL, some users browsing internet and sending/receiving e-mails, and there's a public web server. It seems to be all up and running, but in order to publish web server I have to open a lot of tcp ports other ...

How can you make CCA do host registry check using clientless mode(network scan)? I tried to use "network scan" to check McaFee update but failed. The info I got is:"If you want the permissions / values of all the sensitiveregistry keys to be checked ...

We are using a PIX515E with just one router connected. We're installing PACS and Philips implementation specialists say they will install a new T1 line plus router which will be solely used for backup of PACS images.Here's my dilemma: will I need to ...

HiI have a pix firewall. The problem I have is when I ping a server in the DMZ, I get the following response in the logs:305005: No translation group found for icmp src outside:y.y.y.50 dst dmz2:webserver_1 (type 8, code 0)Just to add I not NATting a...

I have succesfully blocked all file sharing softwares except Lime wire because there is no PDLM available on cisco site. From where i can fetch this PDLM. Please help in this regard.

I'm trying to configure an ASA5510 and when I add this: static (INSIDE,DMZ1) 10.3.200.2 10.3.0.2 netmask 255.255.255.255I get this: INFO: Global address overlaps with NAT exempt configuration.I don't see the overlap. I have attached the running conf...