Other Security Subjects

Hello all,I was hoping to get some clarification on the following syslog message I am getting on a customers PIX."No translation group found for icmp src outside:10.10.70.14 dst WebDMZ:10.8.8.5 (type 8, code 0)"10.10.70.14 is a VPN clients IP address...

VRF without MPLSI would configure separate routing instances with VRFs on a Cisco router. [without using the MPLS protocol but for DMVPN (mgre + ipsec + ospf)] For exmaple i want to create two instances, one for customer A and another one for custom...

Hi,I want to achieve this: the outside subnets 172.17.4.0/22 can only access the intrenal DNS server 10.144.19.2. I will apply the inbound access list on the outside interface.I would like to write the access-list like this:access-list 100 permit tcp...

We use PPTP VPN through our PIX 515 to allow remote users to dial into our network. After the remote user connects to the network, they were able to type something like \\server-name\share to access resources on the internal network.Well, we recentl...

I worked through (with this forum's help) the issue of getting my webserver in the DMZ to talk to my SQL Server on the inside. I tested it on a Lab Win2K webserver last night and it was working.I just arrived this morning and tested it again using t...

A client have moved their FTP server from the public network (hub connected to public interface) to their DMZ. The DMZ has a private address range however they need to access the public address of the server on the DMZ (from inside). I need to keep t...

Slightly off topic because this is PIX 6.3.Is there a document that explains the order of how NAT is executed on the pix for zero translations.I think that nat 0 with an acl is first but i need to clarify for my customer.thanks in advance.

Hello:I currently have some old switches running a variety of IOS versions. How do I patch these against known vulnerabilities, and where are the patches located? The version I am most concerned with is release 11.2. Thanks for any guidance.Brad O...

Hi I have PIX 515E and vpn3005 on my network. (purchased a year ago). I want to add IPS capability into my network. Please help me in deciding whether to replace pix 515e with ASA 5520 or to go with dedicated IPS sensor 4200 series?Also is there any ...

what are all things are needed to change a secondary firewall that's a fail over to active firewall

hiwhat is the significance of using netmask for dynamic nat in global command and what's the differnce between using the netmask and using the range say 10.1.1.50-10.1.1.55 in global.do both have the same effect? or different?thanks

I'm looking to replace/change a PIX at one of our remote connections and need some assistnace on configuring the 2821 for NAT. What is the equivalent commend of NAT 0 for the IOS firewall?

I'm trying to get a bunch of 831 and 1721 routers serving as EZVPN clients in network extension mode to connect to one of three VPN 3060s(for failover), and use RRI to inject the remote subnets into the network inside the concentrators(via RIPv2). T...

Hello!I want buy SmartNet 8x5xNBD contracts for different Cisco devices (ex. Cisco 1700, PIX 501, PIX 521). Can I found somewhere a table to recognize which warranty extension I need? My supplier has in stock only the items "Packaged SmartNet Categor...