Other Security Subjects

Hi Guys,Having an issue with a 515(r) pix.We are loosing connection to the internet on the internal network on a few internal hosts. These seem to belong to the slackers who are last to reach there desks in the morning..When I clear xlate were all go...

Does client behind Hardware client(3002) can access internet ?This client can access VPN to HQ, but cannot access internet.Are there any other options for that? split tunnel should be enabled on HQ(3005)?

Well, it all seems pretty straight forward. I must be missing something, but I cannot for the life of me see it. Traffic is flowing out just fine, but no OWA or Remote Desktop Web Connection (does this use port 3389??). Exchange mail does flow in ...

Hi,ASA/PIX with 2 interfaces, Outside and Inside. Web Server real ip is 10.1.1.88 and the outside static nat ip is 202.187.1.88.So to allow user to access this web server from Internet, the access-list will be as below that apply to Outside interface...

I can't ping between my inside and outside on alot of the devices. Also can you see anything visible wrong with this config?

is the FO-AA a license or does it require a change in the hardware chasis?

Hi there,we "reanimated" an old 3002 Hardware VPN-Client. We first did an update to 4.1.x and after that kicked the old config. Now it seems, that we get not rid of the whole config at all, because of getting old DNS-suffixes by the integrated DHCP-S...

Hello,I have a PIX 501 firewall and am wondering what the comands are to enable logging on teh firewall.Can anyone advise?Tommy

Hi Few clarifications needed on DPDi) Diff btn IKE keepalives and Dead Peer Detection using crypto isakmp keepaliveii) Say i have an IPSec to a router and i isolate all the interfaces in the router would the keepalives work and bring the IPSec down. ...

Hi,We have a ASA5520 with IPS module and I have set it up for IPSec VPN remote access. I was wondering if it is possible to check client PC's anti virus and windows updates to ensure it is reliable enough to connect to our network remotely using VPN ...

Hello,I am struggling to understand a way around a problem that has arisen since I upgraded my 515e failover pair to v7.0(2).We used to NAT 2 different IP addresses through the PIX to the same internal IP address using the following commands:static (...

Twice in the past few days I have experienced the same problem:Nobody can connect via the concentrator and the only log entry I have in the concentrator is:55004 10/12/2005 02:23:03.320 SEV=7 IPSECDBG/1 RPT=224 key_invalid_spi: passed a NULL address ...

Customer has a VPN 3005 Concentrator and clients running Windows XP with Cisco SSL VPN Client v1.0.2.In the Concentrator group settings, we have selected in Client Config >IE Proxy Server Policy > Do no modify Proxy settings.However, when the users c...

What OSI layers can CBAC filter on?