JBDanford2002

If it is from the inside network (eth1) going to the DMZ (eth2) to get to the MPLS network then you ...

Yes they have changed alot. Now you configure subinterface commands.ciscopix(config-if)# interface v...

Where is the MPLS network located to the PIX Firewalls? On the DMZ or the inside interface.

Apply an access-list to the inside interface. Say you only want to allow http, ftp and https outboun...

The ASA should be able to do what you want. Especially if you are replacing a PIX. Do you need to ru...

ASDM --> Configure --> Security Policy --> Service Policy Rules --> Double Click on your Policy --> ...

Yes, on 6.3X there is the following command:fixup protocol pptpOn 7.0, You have to use the inspect p...

Ah, ok. I re-read the first post. I think you are possibly right acomiskey. The option would be to e...

Dont think "isakmp nat-traversal" is relevant here since the tunnel is not terminating on the remote...

Where is the tunnel connection to? Your 501? Have your friend enabl logging on his PIX if he hast al...

Where is your PC in reference to the DMZ? On the DMZ or off of the inside interface?

Is the old firewall still plugged in? Can you verify the IP/subnet mask of it.

Ok. What type of firewall is the "old firewall"? From the command line on the ASA just type the foll...

Here is a link for configuring LDAP AAAhttp://www.cisco.com/en/US/docs/security/asa/asa71/asdm51/sel...

So from the ASA you could not ping the internet? What is the ASA connected to? Are you on a cable co...