Other Security Subjects

Hi,I need second opinion about FWSM placement in Cat6509.Scenario:2 switches ( both Cat6509), 1st unit served as Core Switch (doing routing@L3). This unit is running hybrid mode (CatOS + MSFC). All Vlans and routing are defined here.The 2nd unit serv...

First I can connect several PCs to a router, then connect this router to an ADSL modem, and finally via this model (which is connected to an local ISP), all the PCs on the LAN can access to the internet; Now, let's do this with a firewall, i.e., conn...

Which would be a go good software to monitor packet loss and network latency for an ISP's backbone?.Please provide some documentation so that I can have a study regarding this?Also we have a cache engine, Blue Coat, which blocks ip's and restricts on...

I was successfully authenticating Handheld Wireless devices with my VPN 3060 Concentrator until I upgraded the code because a security alert to 4.1.7.F version. Since then, I have not been getting the devices to connect. Here are the debugs that I ha...

I am running PIX 535 with OS 7.0.2.I put my web server in the dmz.I have the following configuration:access-list Outside_access_in; 2 elementsaccess-list Outside_access_in line 1 extended permit icmp any any echo-reply (hitcnt=9)access-list Outside_a...

I'm running CSA v4.03 and need to get exceptions to work for the Default Desktop module

I've configured a 6500 FWSM module in transparent mode with multiple contexts and SSH is used to login.Unfortunately I'm struggling with the easy bit - I've created a local username/psasword with privilege level 15 but the only username the FWSM will...

Folks,I'm hoping to use dhcprelay agent to provide DHCP addresses to devices behind my FWSM. The DHCP server is on a network a hop away from the (outside) interface, while the network I want to provide DHCP service to is on an (inside) interface.I c...

We currently have two connections on our PIX, ADSL & T-1. Unfortunately, the ADSL requires PPPoE, which 6.3 supports fine. However, 7.0 code doesn't. Just incase anyone has a similar situation, don'w waste your time.

What kind of a performance hit am I going to have if I use a VAM 2 module to do AES encryption instead of DES encryption? All the documentation says that a VAM 2 is designed for DES but I want to use it to do AES.. am I going to see a big drop in per...

We have 2 subnets 10.241.34.0 /24 and 10.241.71.0 /24 in the LAN which form a part of the ofshore dev center, which need to have access to the internet as well as to our local lan 172.19.0.0. how do i configure it?

I'm looking for a CCO or other reference that lists ports required to permit Microsoft Netmeeting INCOMING calls to be permitted (and configured on a PIX). The incoming calls will be to a single inside host with a static address available on the out...

Its a very general question, i want to know the difference between a general firewall and Cisco routers. If I am correct then most of the security features are available on Cisco routers.

i have a pix525there is only one public ip i can use.I need do pat for internal use go web.I also want static map to the ip for outside user can access our web.but when i config two toghter.internal user can't access internet.how can i do to make two...

Can the ISAKMP UDP port 500 change at any time? I have just resolved a problem where the ISAKMP destination port had changed to UDP/9.. It was UDP/500 three days ago? I am under the impression that this is fixed in the router and should not change ...