Other Security Subjects

Hi guys,i'm going to install 2 blades FWSM on my cat6509 ( i have another 2 still installed ).My problem is syslog server becouse log sent by FWSM are not easy to see and understand ( we have also checkpoint and its logs are more readable ).COuld you...

i have a pix with two interface.one for internal.another for outside.my mail server is located inside.i have config alias command translate mail private ip to public ip.now i can use private ip ,domain name(for example mail.aaa.com)access mail server...

I have been working on a lab deployment before going to production. I found that I had an issue with failover until I reduced the security-association lifetime to 120 seconds on the routers connecting to a PIX. I did not change anything on the PIX I...

Hello,Can i pass multicast traffic throught a FWSM in routed mode with a 2.3 version, how?Regards.

Hello,can anyone help me with this?i have 1 192.168.1.0 that only needs access to external http/s browsing in two machines 192.168.1.30 and 60.whats the most secure configuration that i can make to allow only http?thanks

Hello,Do you know what is the difference between this Access-list Error Message ?%SEC-6-IPACCESSLOGDP :%SEC-6-IPACCESSLOGNP :%SEC-6-IPACCESSLOGP :%SEC-6-IPACCESSLOGRP :%SEC-6-IPACCESSLOGS :Thanks,

I know i may sound stupid but still.... How is a leased line of 2 Mbps sufficient for an ethernet connection of 100 Mbps, which is behind it? I mean, how come data coming from an ethernet connection of 100Mbps is able to go out through a leased line ...

Hi,do i always have to use somewhere permit ip statement? i want to restrict access to some machine only to http, how can i do this without explicitly denying?thanks

hi,basic question!what i'm passing when i do access-list t2 permit ip any any?permiting all tcpip stack?when i permit tcp i'm not also permiting ip?thankswhere can i read more about these separation of tcp udp ip icmp?

Hi,We have a customer who is migrating all Firewalls onto a FWSM. There is a requirement to daisy chain some of the FW Contexts . The Outside of one context_A connects to the inside of another context_B via a shared Vlan 200. Please note that the on...

Hi,I need second opinion about FWSM placement in Cat6509.Scenario:2 switches ( both Cat6509), 1st unit served as Core Switch (doing routing@L3). This unit is running hybrid mode (CatOS + MSFC). All Vlans and routing are defined here.The 2nd unit serv...

First I can connect several PCs to a router, then connect this router to an ADSL modem, and finally via this model (which is connected to an local ISP), all the PCs on the LAN can access to the internet; Now, let's do this with a firewall, i.e., conn...

Which would be a go good software to monitor packet loss and network latency for an ISP's backbone?.Please provide some documentation so that I can have a study regarding this?Also we have a cache engine, Blue Coat, which blocks ip's and restricts on...

I was successfully authenticating Handheld Wireless devices with my VPN 3060 Concentrator until I upgraded the code because a security alert to 4.1.7.F version. Since then, I have not been getting the devices to connect. Here are the debugs that I ha...

I am running PIX 535 with OS 7.0.2.I put my web server in the dmz.I have the following configuration:access-list Outside_access_in; 2 elementsaccess-list Outside_access_in line 1 extended permit icmp any any echo-reply (hitcnt=9)access-list Outside_a...