About pgalligan

pgalligan · 04-14-2008

Hi,In the data sheet it lists 2 contexts for a standard license on the FWSM "for testing purposes". What exactly does "for testing purposes" mean? Are these 2 contexts restricted in any way? Can I use them now in a prod environment and then upgrade t...

pgalligan · 11-14-2007

I have 3 routers (2 x 2811, 1 x 1841 all with hardware encryption) on 12.4(17) code. Customer was using GRE tunnels inside IPSec tunnels (using crypto maps) for the purpose of enabling dynamic routing between the sites. The DR router was moved to a n...

pgalligan · 05-09-2006

We have found this handy URL in the release notes, which generates a test web page with the PIX config (ie. same as wr t). I have also used the https://<ip>/capture/<name>/pcap URL to download packet captures.So I was wondering, is there a reference ...

pgalligan · 04-05-2006

Can anyone suggest the best upgrade method from ACS 3.1 to 4.0, with new server hardware. New server is running Windows 2003.Backup from 3.1 will not restore to 4.0 (or 3.3.3), and 3.1 will not install on Windows 2003.We would prefer not to upgrade t...

pgalligan · 03-05-2006

Can anyone tell me what this command does. The default for our switches is for it to be disabled, ie. "no spanning-tree optimise bpdu transmission". I have checked the documentation for the relevant switch models and can't find it in the command refe...

pgalligan · 11-15-2007

Hi,Thanks for your input.I have already tried the following between DR and MSt:int tunnelip address private_ip subnet_masktunnel source outside_interface_nametunnel destination peer_address tunnel protection ipsec profile blahWe get the same symptoms...

pgalligan · 06-25-2006

Is 1.2.3.7 your outside interface IP, or an IP used in a NAT? Try using a static NAT instead of a static PAT:static (inside,outside) 1.2.3.4 10.10.10.10

pgalligan · 06-18-2006

The correct answer from a security engineer would be:"Block all ports except those which you explicitly wish to permit!" (eg. allowing port 80 to your webserver):)

pgalligan · 05-09-2006

"which generates a test web page"should read:"which generates a text web page"

pgalligan · 04-06-2006

I had thought of that but wasn't too keen on it.I messed around with CSUTIL and was able to dump and import users and groups, but not the NAS devices. In the end I decided I'd waste more time trying to export/import the NAS devices than it would take...

Member Since	‎08-08-2003 05:44 PM
Date Last Visited	‎08-18-2017 03:51 AM
Posts	25
Total Helpful Votes Received	4

User Statistics

User Activity

2 contexts in standard FWSM license

Unidirectional IPSec tunnel

PIX https commands - https://<ip>/config

Server to Server upgrade - ACS 3.1 to 4.0

STP Optimise BPDU Transmission?

Re: Unidirectional IPSec tunnel

Re: Returns to client from different IP

Re: Malicious Ports

Re: PIX https commands - https://<ip>/config

Re: Server to Server upgrade - ACS 3.1 to 4.0