Other Security Subjects

I have a PIX 515E (restricted), and have a situation where I need to avoid using NAT for hosts on my DMZ (long story...has to do with new VOIP equipment that won't work behind NAT).I have a large block of public IP addresses, mostly unused. I assume ...

hello, I'm having problems setting up my PIX506E device. I don't have connectivity from the hosts on my switch to the router. I'm using a 2560 that is connected to the pix and that is connected to a 2735 router. I have my default gateway as th...

Not sure if this is possible, but I have an internal host that needs to be accessed from the outside and from my dmz. In both cases the traffic will be initiated from the other side, not the internal host. Is this possible? My config will look som...

As SNMP protocol vulnarabilities are well known,what are the best practices to implement to secure the network/routers etc

HiI cannot authenticate with my Microsoft SMTP server when traffic flows through my 837 router.I've found the 'no fixup protocol smtp 25' command, which seems only to be appropriate for PIX.Is there an equivalent for my router?Any info much appreciat...

I have an 831 with an external modem attached using the Aux port of the 831. I was just wondering if anyone has a basic config for getting the modem to dialout. I am using it as the main interface and not the backup. Thanks.

PIX501->C1841->Network Cloud->C1841->PIX501Both cisco1841 run GRE. So is the link secure if GRE is running on both C1841 instead of running on PIX501? Please advise or correct me thank you very much any help is deeply appreciated

I'm a noob so keep it simple for me. I'm not good at the commands.I want to lock down my PIX 501 (v.6.2) by doing the following:Disable all incoming traffic except if initiated by someone on the inside and https access to one web serverBlock all outg...

I have a new asa5520 in which I am using NAT; I have a DMZ and two internal interfaces. I need to setup RDP access (temp) to all three interfaces. I am able to RDP(port3389) into a server on the DMZ but I cannot access either of the two internal inte...

I have an unusual scenario where I have a VoIP device that won't work behind NAT.Is there a way to assign public IP's to certain hosts in the DMZ, yet still NAT to a private address for another host on the DMZ? All static mappings would be fine...

I have 3com super stack 3226 which is a multi layer switch. I have three vlans configured on it. VlanA with an address of 192.168.1.0, VlanB with an address of 192.168.2.0 and VlanC with an address of 192.168.3.0. I can get the vlans to talk to each ...

Below is a snippit of the pertinant part of a config on one of my routers. The "show logging" indicates that items are being logged (via trap), but nothing's being sent to the logging host, "192.168.145.16". What am I missing? Is syslog on Cisco ...

I can route traffic over port 3389 to DMZ but the same rule doenst allow 3389 to the internal networks. External on port 0, dmz on 1, internal networks on 2 and 3. I allow connections to internal port 3389 from source "outside" IP to my internal "Des...

Does anyone know if the PIX can act as ACTIVE/ACTIVE over the wan (the wan connection is 90Mbps).I saw no info in the docs that says that it can not.

Good Day All,Has anyone had to boot their fwsm into the maintenance partition while the catalyst switch was in a production network.I have found the command hw-module module x reset cf:1; but am a little hesitant to use it.... Currently... we have i...