Other Security Subjects

Hi,For our setup, we need to nat source AND destination. Here is what we configured.global (UNMAN_CUST) 100 interfacenat (outside) 100 access-list outside_pnat_inbound outsidestatic (UNMAN_CUST,outside) x.x.x.x y.y.y.y netmask 255.255.255.255But, whe...

Hi all,I have a LAC which forwards ppp sessions of pppoe users to a LNS through a l2tp.The pppoe implementation is pppoe over ethernet.A 7300 acts as the LAC while a 7206 as LNS.By default, the LAC works as a PPP LCP and authentication proxy.Based on...

When I try to make a change to the Host Managing Tasks section, I receive the following, even though I'm logged in as admin:"You have insufficient rights to perform this operation"I've checked the user configuration for admin and all boxes under role...

Does any one what this error message means%FW-3-RESPONDER_WND_SCALE_INI_NO_SCALE: Dropping packet - Invalid Window Scale option for session 129.230.18.82:17917 to 194.75.132.166:25 (Initiator scale 0 Responder scale 0)Thanks in advancesheikh

Hey all,With a 6509, can the MSFC be behind two firewalls (security contexts on the FWSM) with the firewalls running in transparent mode?? I wanted to do it this way so that the 6509 and a specific WAN router can exchange EIGRP udpates.Thanks,-Lloyd

Hi,I have a two part question. 1. When a user connects to PIX using the VPN client, what is the best way to allow internet access? I am not really familiar with setting up a split tunnel. Does the end user go through the VPN, and then out the int...

Hello, sorry if this is the wrong forum. Can someone give me a jump on the easiest way to block Google Desktop app without blocking the google search page? We have a PIX 520 with 1000 PC's/ 20 Servers behind it and a lot of Admin users. Is there a IP...

Hi,I need to restrict users access to a site only between 16:00 hrs to 08:00 hrs daily. How can it be achieved at Router level. Its a http based application and can we classify only on destination ip address as other applications also uses same port ...

hello.I send some pings on pix with IoS 7.0pixfirewall# ping Interface: insideTarget IP address: 10.40.4.1Repeat count: [5] 100Datagram size: [100] Timeout in seconds: [2] Extended commands [n]: Sweep range of sizes [n]: Sending 20, 100-byte ICMP Ech...

Does anyone know of the risk of removing an 'ip inspect..' statement from an IOS firewall feature set? Particulary the 'ip inspect..smtp or esmtp statement. We are having issue's between exchange servers through our site-to-site vpn and the solution ...

I'm not familar to the environment and want to understand how it works. I guess FWSM and VPNSM is totally separated configuration and using different VLANs each other. for example, VPN terminating in the VPNSM configured VLAN and forward to the FWSM ...

I'm trying to access our Citrix farm by using the full citrix client (Citrix Program Neighborhood) through our vpn concentrator. I have enabled the the 'Enable Citrix MetaFrame' and have a ssl cert on the concentrator with a fqdn for the CN. What e...

Any instructions on uninstalling CSA 5.x? We had a pilot group deployed, but have completely rebuilt the VMS server, and need to uninstall the old agents...Any help is appreciated...

I am planning to implement 802.1x on a 4506 switch. The issue that i have is i have 5 user Departmental vlan on the switch. How can i configure the ACS to assigned vlan for each of my user to their respected departmental vlan? please help