Other Security Subjects

Hello all-My question is simply this. Using the following:name 207.46.250.119 microsoft.comname 192.168.1.115 BlockedUseraccess-list inside_access_in permit ip host BlockedUser host microsoft.comaccess-list inside_access_in deny ip host BlockedUser ...

My FWSM (2.2(1)) PDM (4.0) traffic rate shows approximately one-tenth the actual traffic rate for IPsec traffic. The outside interface appears to reflect the correct rate, but the internal interface looks incorrect. Has anyone else seen this? TIA.

I have a pix515 with 4.4.7 ios !it will be upgraded from 4.4.7 to 6.3.4!I am wandering about it's key both whether need upgrade and how upgrade it ?thanks you!

I have a pix520 with OS 4.4(7) with a floppy disk drive.I want to update to OS 6.2(1).In my study book,it says I need three files to do a update:rawrite.exe/bh62.bin/pix621.binAnd it says I need a Activation Key to activate DES and 3DES.But I bought ...

Hi All,I noticed that PIX does not proxy the source ip address when it does a static mapping.Eg,Host A - 192.168.1.10 (PIX outside interface)Host B - 10.10.10.100 (PIX inside interface)PIX outside - 192.168.1.1PIX inside - 10.10.10.1I have a server i...

I am working with a client who has a Cisco 3005. I am being told that when they try to input an allowable remote network they can only use two types of subnet masks, either a 32bit mask or a 24 bit mask. We attempted to put a valid network in with ...

When my PCs send MSBrowser announcements, they are some how "reflected" off of the PIX internal interface. I will see maybe one or two broadcasts in the switch from the originating device's port and then about 20,000 or so broadcasts on the switch po...

I am trying to add second remote network to and existing tunnel. When I enter the subnet mask, it returns an Invalid Mask.For example, 10.10.81.96 with a 0.0.0.240 mask will not work. Are my only options a 0 or 255??

i am able to ping from interface with security low security level to high security level but not able to ping from high level security interface to low level security interface.My low level security interface has the ip address 10.1.0.254/255.255.248...

Good Day,Can I configure a 3005 for an IPSec LAN-to-LAN VPN even though the remote end does not have a static IP address?If not, then i suppose that i must use ezvpn and network extension mode.My remote router is a Cisco 837.

Just upgraded firmware on our 3005 from 4.0.5.A to 4.1.7.D. No configuration changes were made on the VPN after upgrade. Now clients coming in through the VPN can no longer browse the network or get Internet access. Before update, everything worke...

I am attempting to connect a cisco 3005 and a 2621 router together. Currently I am getting the errorCRYPTO-6-IKMP_MODE_FAILURE: Processing of Quick mode failed with peer at X.X.X.Xfrom the routerAny ideas?please helpDave Laurentino

Guys I need an answer quickly if you can. I am trying to do the following. I have two vpn tunnels from 3002 clients to a pix firewall. One is coming into the outside interface, the other is coming into another interface on the PIX. both tunnels w...

Our firm have a private CA and a subordinate one, so i trayed to install first our root CA but (unsuccessful it is 4096bits) so i instaled our subordinate CA certificate, but when i tray to install and a indentity certificate (PKCS10 format request) ...