Other Security Subjects

Hi i have a cisco pix firewall (515E) i ve configured it with : inside 10.1.1.1 255.255.0.0 dmz 192.168.100.1 255.255.255.0 outside 100.100.85.2route outside 0.0.0.0 0.0.0.0 100.100.85.1(internet router)global (dmz) 1 192.168.100.10-192.168.100.20glo...

Hi, I am installing a 3845 router with the security bundle. I come from a checkpoint fw world so this is a bit new to me. Do i just need to setup Access-lists for the firewall code or is there a special way to setup fw rules for cisco routers?Pete

I have VPN tunnel setup between my PIX and a client. I have an access-list applied to my outside port to filter incoming traffic:access-list acl-in permit esp host 213.212.11.9 host 213.1.244.11 access-list acl-in permit udp host 213.212.11.9 host 2...

We have DMVPN setup both hub-spoke and spoke-spoke at my H.O.We want to setup a VPN (point-to-point) with another company, which is having same type of DMVPN setup as of ours, in their VPN box.Is it possible to setup the point-to-point VPN with the o...

Hi,I have the following network with a firewall in a cable environment.PC----CM----CM----INSIDE----------OUTSIDE | | | | ...

Hi guys,i'm going to install 2 blades FWSM on my cat6509 ( i have another 2 still installed ).My problem is syslog server becouse log sent by FWSM are not easy to see and understand ( we have also checkpoint and its logs are more readable ).COuld you...

i have a pix with two interface.one for internal.another for outside.my mail server is located inside.i have config alias command translate mail private ip to public ip.now i can use private ip ,domain name(for example mail.aaa.com)access mail server...

I have been working on a lab deployment before going to production. I found that I had an issue with failover until I reduced the security-association lifetime to 120 seconds on the routers connecting to a PIX. I did not change anything on the PIX I...

Hello,Can i pass multicast traffic throught a FWSM in routed mode with a 2.3 version, how?Regards.

Hello,can anyone help me with this?i have 1 192.168.1.0 that only needs access to external http/s browsing in two machines 192.168.1.30 and 60.whats the most secure configuration that i can make to allow only http?thanks

Hello,Do you know what is the difference between this Access-list Error Message ?%SEC-6-IPACCESSLOGDP :%SEC-6-IPACCESSLOGNP :%SEC-6-IPACCESSLOGP :%SEC-6-IPACCESSLOGRP :%SEC-6-IPACCESSLOGS :Thanks,

I know i may sound stupid but still.... How is a leased line of 2 Mbps sufficient for an ethernet connection of 100 Mbps, which is behind it? I mean, how come data coming from an ethernet connection of 100Mbps is able to go out through a leased line ...

Hi,do i always have to use somewhere permit ip statement? i want to restrict access to some machine only to http, how can i do this without explicitly denying?thanks

hi,basic question!what i'm passing when i do access-list t2 permit ip any any?permiting all tcpip stack?when i permit tcp i'm not also permiting ip?thankswhere can i read more about these separation of tcp udp ip icmp?

Hi,We have a customer who is migrating all Firewalls onto a FWSM. There is a requirement to daisy chain some of the FW Contexts . The Outside of one context_A connects to the inside of another context_B via a shared Vlan 200. Please note that the on...