Network Security

On a router I get an EIGRP can't find upstream IP and vice versa on the ASA as I have two FA plugged into two Gig E (stepped down) on the ASA. There are two tunnels going out both interfaces but I get these errors simply pinging from the upstream rou...

Today I updated a FWSM 3.1(1) with a ASDM 5.2(3)F.What works with this setup and what won't. The release notes specify that it supports 3.1(x) and that 5.0(x) won't release any updates.But online help says asdm 5.2 works only with 3.2. Ok help docume...

Can you NAT to a network that is not directly connected to one of your firewall ports?Ie...Firewall Outside 61.44.120.1Firewall Inside 10.101.1.2Internal Multilayer Vlan1 10.101.1.1Internal Multilayer Vlan2 10.101.2.1Can you NAT incoming traffic for ...

Hi All,I configured a sample VPN in a 2611 Router to connect via Cisco VPN Client Sfw from a Remote PC on internet.When the tunnel is estabilished, all networks stop to work in my PC.I can't access the LAN inside.Could anybody help me to solve this p...

Hi!In core switches we have fwsm module installed with hsrp running b/w the 2 switches. In core 2 vlan is created. 1 for server & anohter for IP phones.there will be 110 vlans that will be created into individual distribution switches. can someone gu...

I'm having a problem getting web access from my dmz network. It has a higher security-level than the outside interface, so shouldn't I be able to get outside internet access from the dmz? Inbound access from outside to the DMZ works fine the way I ha...

I have a Pix 515E running v7.2. I can configure a site-to-site VPN and it works. I configure the next and it swings from L2L to User and fails, sometimes it will start as L2L then after about 8hours it becomes User and fails. If I configure a third...

Hi guys, I really really hope someone can help me out. I've recently purchased a ASA 5505.I have been struggling badly with this :(My setup is ISP -> Modem/Router -> ASA Inside interfaceIP: 192.168.1.1Mask: 255.255.255.0Security level: 100DMZ:IP: 192...

I currently have a site-site VPN (VPN1) betwween a Cisco Pix 506E and an ASA 5510 in HK and Leeds respectively. I need to move the IPsec tunnel to another internet gateway (10 Mb) in Leeds to which is connected a Cisco Pix 506E. To make any changes t...

We are having with our local Cisco PIX 515, whereby the site to site VPN to our PIX appears to be breaking, and not re-establishing itself, every 36 hours or so.Upon further inpsection, the symptom that we see is a slow reduction in the number of ava...

Kinldy provide me command to clear the connections in Pix 535 s/w ver 6.3..

Hi, when I connect with VPN client I can't anymore browse my network and therefore I can't print because the printer is on another PC. Moreover I can't download or send messages via outlook. On the other hand I can correctly browse the internet.

I have a failover pair of PIX 525's (in production) and want to upgrade the firmware on both of them (probably from 6.3 to 6.35 and maybe later on to 7.x). With the failover pair - should I power one down and do the upgrade on the other first, then ...

I have 2 Pix 525 .it works as Active/Standby .in my case the Active is the secondry and the standby is the primary Pix. we use Failover cable and stateful failover together .the Sync/Failover is working fine butWhen i configured subinterfaces on the ...