Recent content by kasser

Hi all, I am having some issues setting up a access-list. I want to be able to give a host outside my firewall access to a server so it can listen on port 1364. I will be giving the host a public ip of ours to use. This spare public ip i statically mapped to the server. I created the access...

I have checked all settings and renetered the settings but still getting the same error. not sure why this is happening all of a sudden. From other checks the only one that I am concerned about is show crypto ipsec sa command this doesnt come up with anything and im not sure why? can some one...

Hi all, A working VPN is now not working, i think the problem is ISAKMP setting mismatch but the other side deny this. Below is the error I get can someone shed some more light on this. crypto_isakmp_process_block:src:171.192.4.30, dest:195.224.52.2 spt:500 dpt:500 ISAKMP: phase 2 packet is a...

Hi all, I have watchguard firebox on our network, I have setup VPN for myself using PPTP. I have given the access and made all the necessary configurations. But am unable to make a connection, my firebox is giving the following logs, please can some one help. I have tried using firebox...

Hi all, I have watchguard firebox on our network, I have setup VPN for myself using PPTP. I have given the access and made all the necessary configurations. But am unable to make a connection, my firebox is giving the following logs, please can some one help. I have tried using firebox...

Hi Brian, Thanks for your reply. Please can you clarify when you say i need to configure the outside nat. Thanks in advance

sh run : Saved : PIX Version 6.3(5) interface ethernet0 100full interface ethernet1 100full interface ethernet2 100full interface ethernet3 100full interface ethernet4 100full interface ethernet5 100full nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 DMZ1...

Hi all, Below is the configuration for a VPN that i have constructed on our network. access-list 66 permit ip 195.224.52.0 255.255.255.224 165.44.132.0 255.255.255.0 crypto ipsec transform-set BOA esp-3des esp-sha-hmac crypto map BOA 166 ipsec-isakmp crypto map BOA 166 match address 66...

Thanks for your reply professor. On the firewall I have allowed SSH connections to come thru onto the sophos box. But on my switch there is no option for SSH and we are not using access lists on the switch. so I was presuming that it should go str8 thru. Even when I try connecting I cant see it...

Hi all, I have a sophos security box, which I need to get reset, the only this is done is by setting it on the network with SSH enabled and then letting Sophos login remotely and reset it. On my network, I have a firebox firewall which I have configured to let ssh connections, which in turn is...

I have resolved this, there was an entry in my PIX for a url server and it wasnt the one we should be using. Thanks all anyway

Hi all, Im really confused. We have some machines on a DMZ which we give access to the internet too. I want these machines to hit my isa server and then go out, at the mo they are hitting a isa server which we have not got in production. When I try adding the proxy settings for my isa server it...

I have been trying to add the certificate to group policies in AD so that when users go to a that particular website it brings up the box which asks them to choose the digital certificate, and not having any luck, this would be the way id want to compleet it. Help please.

I would like to set up our isa server to publish certificates to users but am a little confused as how to do this. All help is appreciated.

Hello, This is probably an easy solution but if you dont know then you need to find out. I need to rollout a PFx certificate to my company. I dont want to send it to each individual but want to roll it out to everyone all at once. Could someone please advise me the best way to do this? All...