4
votes
4answers
626 views

How can I make an internet facing TFTP server secure?

I have many Cisco IP phones that operate in the following manner (oversimplified): Negotiate with DHCP for IP, DNS, TFTP, etc. Look for SEPXXXXXXXXXXXX.cnf.xml configuration file on TFTP server ...
1
vote
1answer
27 views

How can I remove the ACL of PIX firewall?

I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX? PIX-SECU(config)# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) ...
2
votes
2answers
150 views

With Azure, can I create a VLAN and put all my worker roles and VM's in there?

Is it possible to create a sort of VLAN or private azure LAN thingy .. where I can put any new Workers or VM's in that VLAN? one of the reasons is because I was hoping to create a SQL server on a VM ...
-1
votes
1answer
230 views

Tunneling specific webserver port on localhost using SSH

It is possible allow website surfing running on a specific port (10000) only accessing it trough SSH tunnel? Real case: Apache is running on port 80 for http and 443 for https, anyone can surf all ...
0
votes
2answers
247 views

Can a typical firewall appliance handle things like throttling requests per user (per IP)?

I'm intending to purchase a Cisco ASA 5510, but am wondering whether or not I should expect to be able to do things such as mentioned in the question title with a typical firewall (or specifically ...
1
vote
1answer
241 views

Configuring a PIX to allow SMTP between DMZ and internal network

I have a Web Server (193.170.4.2) in my DMZ that needs to communicate with the our Exchange Server (10.77.51.87) internally via SMTP. I used access-list acl-dmz permit tcp host 193.170.4.2 host ...
4
votes
1answer
419 views

Firewall ACL management tool

Is there any Firewall ACL management tool which can generate set of ACLs for all my network, including switches, checkpoint, cisco routers, windows, linux etc? I think such tool would make sense as ...
1
vote
2answers
124 views

Controlling traffic on a small subnet

I have a small network with a business-class cable modem. I have a *.192/29 block assigned to the internal side of the modem. The first usable IP, .193, is assigned to the cable modem interface. I ...
1
vote
4answers
9k views

How to block SKYPE when it's using port 80 & 443?

How to block SKYPE when it's using port 80 & 443 in a network. ( better if I can do it by using ISA 2006 and without disabling web) I know if users can't install skype they wont be able to use it. ...
0
votes
3answers
1k views

Can't connect to PPTP server outside of network

I'm trying to configure my Cisco 881 running IOS 15 to allow pptp connections to servers outside of the network. I know the PPTP server is configured correctly, because a)it's a clients VPN, and b) ...
3
votes
6answers
5k views

Cisco Firewall vs Cisco Router ACLs

What are the advantages of getting a dedicated firewall instead of, or in addition to, using ACLs and ip inspection on a router? I realize this might depend on the version of the router, are certain ...