Cisco Firewall :: To Replace Sonicwall NSA240 In SME Environment?
Oct 17, 2011I am looking for a Cisco firewall to replace a Sonicwall NSA240 firewall in SME environment?
View 3 Replies
ADVERTISEMENT
Cisco VPN :: Make IPSEC Tunnel Between 857 And Sonicwall NSA240?
May 24, 2011I am trying to make an IPSEC tunnell between a 857 and a Sonicwall NSA240.The tunnell goes up but the traffic from the 857 seems to be pushed outside the router to the public internet, not into the tunnel.
Following configuration:
crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 lifetime 28800crypto isakmp key xxxxx address 111.111.111.111 no-xauth!crypto ipsec security-association lifetime seconds 28800!crypto ipsec transform-set xxxx esp-3des esp-md5-hmac!crypto map xxxx 1 ipsec-isakmp description VPN to xxxx set peer 1111.111.1111.111 set security-association lifetime seconds 3600 set transform-set xxxx set pfs group2 match address 115
ip forward-protocol ndip route 0.0.0.0 0.0.0.0 Dialer0!
access-list 115 permit ip 172.28.3.0 0.0.0.255 192.168.22.0 0.0.0.255
If I try a traceroute the traffic is not pushed into the tunel but it seems the it tries to route the traffice over the internet using Dialer0.
Cisco Firewall :: Firewall / Can ASR 1006 Replace ASA 5580
Oct 30, 2011i check ASR 1006 config with ESP-40, the firewall permonce can reach 40G, ASA 5580 is 20G, can ASR 1006 replace ASA 5580, is there any function feature problem?
View 1 Replies View RelatedCisco Firewall :: FWSM For 6506 / 6509 Is Supported In VSS Environment?
May 29, 2012Does the FWSM for a 6506/6509 is supported in a VSS environment?Also, does the FWSM work with the 2T supervisor module?
View 1 Replies View RelatedBuilding Open Source Firewall In Linux Environment From Scratch?
Jul 10, 2011I have decided build an open source firewall in linux environment. I have exactly one year to complete this project. The firewall will be a stateful packet filtering firewall working at network, transport and application layers. I would also be provided log analysis features. What I want to know is whether this is a good enough project or put in other words, is it a worthwhile project to undertake?
View 13 Replies View RelatedCisco Firewall :: ASA 8.4 - New Configuration To Replace Old NAT 0 Command
Jan 15, 2012What is the new configuration in ASA 8.4 to replace the old "nat 0" command.
View 1 Replies View RelatedCisco Firewall :: Upgrade / Replace 515E With ASA
May 15, 2012I need to upgrade/ replace a Cisco 515 E firewall with a Cisco ASA. Not sure what model yet! The pix has about 80 lines of ACLs and I side and outside interfaces with No VPNs.. I was wondering of those lines of ACLs can be transferred over to ASA as is or there are things I need to watch for ?
View 21 Replies View RelatedCisco Firewall :: Replace Zywall With 5520 ASA
Jun 24, 2012i have to replace our zywall with an 5520 asa. [ode]
-connections from inside out outside, inside to dmz and inside to wlan.
-connections from wlan to outside, wlan to dmz
-connections from dmz to outside
connection from outside to dmz only for port 25,110,143,80,443,22 on ip 82.218.135.3.connections from outside 82.218.6.10:3389 to ip 10.1.0.200:3389. [code]
Cisco Switching/Routing :: 1921 To Replace A Software Firewall
Feb 26, 2013We purchased a cisco 1921 router to replace a software firwall not long ago. The router was sold as a firewall with the suggestion that an ASA would be unnecessary.Unfortunately a router does not replace/do the jobs a firewall does, so I looked online and noticed that Cisco do offer firweall security features in one of their IOS.How do I tell if this is implemented on my router?If not, does my IOS support this, or do I need to buy an extension/another version of the IOS?,The version of the IOS I have is: c1900-universalk9-mz.SPA.151-4.M4.bin.
View 3 Replies View RelatedCisco Firewall :: 5520 - Procedure To Replace Failed Secondary ASA Unit
Apr 10, 2012i just received a RMA for failed ASA 5520 that was acting as secondary unit in multicontext configuration. What would be correct procedure to install it back in production? Do i need to restore backed up config of the fallen unit or is it just enough to enable multimode and connect to existing (primary) unit? Any good link for documentation that deal with this issues.
View 5 Replies View RelatedCisco Firewall :: ASA 7.2 Adding A Context In A Multiple Context Environment
Jul 1, 2012On my production environment I have a firewall with already two contexts defined (15% of CPU used) and I want to add a new one.
This context is going to use the same interfaces as the others contexts. When I will enable the context, can I have some sort of repercussion on these two context ?
Cisco WAN :: SonicWall VPN Between 2800
Oct 29, 2012I have two CISCO 2800 routers tied together over a Metro Ethernet bewteen an HQ location and a Colocation facility. There are multiple subnets on both sides of the MAN. All things work in this regard.
I added two new Interfaces to the routers to create a VPN failover should the above MAN go down. I use IP SLA to track the MAN, then move to the VPN route when reachability is down.
I can source ping from one CISCO router Interface to the other, through the two interfaces to the Sonicwalls and reach the router interface of the CISCO on the other side of the VPN tunnel.
Problem: I can not ping any subnet behind the interface I ping through the Sonicwall VPN tunnel?
Example 2800 G0/2 interface 100.1.1.41 /30 through Sonicwal over Internet to other Sonicwall and out ot the G0/2 100.1.10.41 /30 interface on the other 2800 router. Ping is fine.
Cisco VPN :: Sonicwall 2400 VPN With 8xx?
Aug 16, 2011I am building the VPN with Sonicwall and Cisco Router, the VPN status is indicated ok on the Sonicwall and able to ping only,I know it required ACL on Cisco but it failed, I cannot ping the sonicwall from cisco, the access from external to cisco internal is also fail.
Site A SonicWall = 192.168.1.0Site B (Cisco) = 192.168.143.0
crypto isakmp policy 15encr 3desauthentication pre-sharegroup 2lifetime 28800crypto isakmp key XXXXX address 118.142.###.###crypto ipsec security-association lifetime seconds 28800crypto ipsec transform-set T1 esp-3des esp-sha-hmaccrypto map tosonicwall2 15 ipsec-isakmpset peer 118.142.116.146set transform-set T1match address 110 ip nat inside source route-map nonat interface Dialer0 overloadip nat inside source static tcp 192.168.143.20 80 202.64.135.### 80 extendableip nat inside source static tcp 192.168.143.20 3389 202.64.135.### 3389 extendable!access-list 1 permit 192.168.143.0 0.0.0.255access-list 110 permit ip 192.168.143.0 0.0.0.255 192.168.1.0 0.0.0.255access-list 110 deny ip 192.168.143.0 0.0.0.255 anyaccess-list 115 permit ip 192.168.143.0 0.0.0.255 anyaccess-list 115 deny ip 192.168.143.0 0.0.0.255 192.168.1.0 0.0.0.255no cdp run!route-map nonat permit 10match ip address 115!
Cisco VPN :: SonicWall / ASA5520 VPN Disconnects
Feb 4, 2009We have a several SonicWall TZ 190 establishing VPN tunnels with a ASA5520. Pericodically random VPN tunnels will drop and can not re-establish a connection. In order to re-establish the dropped VPN tunnel, our firewall folks manually drop all VPN tunnels connected to the ASA (they use to physically power cycle the ASA). They claim this is the only way to resolve the problem and since the SonicWall Life Time seconds for Phase 1 and 2 are set to 28800, they reset the tunnels every 8 hours. Additionally, they claim that SonicWall IPSEC is different that Cisco IPSEC which is the main problem. Hence they are requesting a SONICWAll VPN concentrator..
View 4 Replies View RelatedCisco VPN :: 5505 - L2L To Sonicwall / ASA With Dynamic IP
Feb 8, 2011My SIP trunk provider uses a SonicWall Pro 3060, I need to initiate a IPSec VPN tunnel from an ASA 5505 (ASA1) for SIP traffic to a PBX connected on ASA1's inside.ASA1 should also connect a VPN to ASA2, ASA2 has a fixed IP I have not been able to figure out how to initiate the tunnel from the ASA1 to the Sonicwall due to the dynamic IP.
View 3 Replies View RelatedSonicwall Router Settings For VPN
Oct 5, 2012My internet line is coming directly into HUWAI router and from here its supplying to sonicwall TZ210 WAN port.I have a domain from dyndns.org that is set right now in sonicwall. But when I browse this domain from outsde it opens my HUWAI router login page and I want it to open my SONICWALL login PAGE.
View 2 Replies View RelatedDifference Between SonicWALL TZ 210 And ASA 5510?
Mar 18, 2013Which is a better firewall without looking at all the additional services you can purchase on a Sonicwall.
View 19 Replies View RelatedDNS Redirect With SonicWall TZ210
Dec 11, 2012It's been awhile since work has thrown me a curve ball so I was about due. We've got a client that wants us to log into their secure portal, this is normally not a issue. The link they sent us to their 'portal' apparently takes us to the wrong page. Their solution to this is for us to create a DNS entry to resolve that URL to a specific IP address. We don't currently have a DNS server setup in house so I assumed this would be something done on the Sonicwall.
I asked them why I couldn't just go to the IP address instead of the URL anyway and they said it wouldn't work. Is this something that I can maybe create a NAT Policy for and have it redirect traffic to there? I know the SonicWall has a DNS tab but I've never touched it and I'm not sure what I would need to put in there anyway.
TZ105 - Using Sonicwall With 3G USB Failover?
Dec 9, 2012I'm having a hard time finding which Verizon 3g usb phone cards that will work with a TZ105. How to get it working on a TZ105, what usb phone card you're using and the phone provider. Sonicwall support is telling me there are no verizon cards that will work right now. I have my Sonicwall vendor looking into it, but still haven't heard back from him either. So at this point I'm looking for any USB 3g phone card that is known to work.
View 11 Replies View RelatedCisco Infrastructure :: VPN Between RV042 V1 And SonicWall TZ200
May 19, 2011Hardware Configuration:
Office 1: Sonicwall TZ200 (192.168.11.xx)
Office 2: Sonicwall TZ100 (192.168.12.xx)
Home Office: Linksys RV042 v1 (192.168.13.xx)
The VPN tunnel between Office 1 and Office 2 is functioning.
The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
this setup and can post their respective settings.
Cisco WAN :: BGP Setup With 2 2900 Routers And One Sonicwall
Apr 24, 2013I am looking to setup for BGP with the following conditions:
Client has two 2900 routers, each connecting to a seperate ISP
Client has a Sonic Firewall with a link to each router
Client owns their own /24 block of public IPs and has their own AS Number.
Client has a public /24 and /25 from the corresponding ISPs
Client has supplied the following routing rules they would like to use:
-Anything from their own public subnet should advertize via the two ISP's with best path selection
-Anything from the respective ISP public subnets should use only their link (The ISP's are not auth'd to advertize the other's network)
The two routers are directly connected to eachother and each has a link going to the Sonicwall.
Cisco Routers :: VPN Between RV042 V1 And SonicWall TZ200
May 22, 2011Hardware Configuration:
Office 1: Sonicwall TZ200 (192.168.11.xx)
Office 2: Sonicwall TZ100 (192.168.12.xx)
Home Office: Linksys RV042 v1 (192.168.13.xx)
The VPN tunnel between Office 1 and Office 2 is functioning.The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
Cisco 3750 / Sonicwall TZ200 - Cannot Get NAT To Work
May 15, 2013I am attempting to get a NAT connection to work through a Sonicwall TZ200 to a VLAN defined on a Cisco 3750 switch. So far I have not been able to get it to work. I am able from the VLAN to access the internet and devices on another VLAN.
I have reviewed the configuration of the Sonicwall with Sonicwall support. They checked and see no issue with the configuration. I have the NAT gateway set to the vlan gateway IP address.
Are there any particular configuration options that I need to set on the 3750 switch in order to be able to route the traffic from the internet to the VLAN?
Cisco 800 / Sonicwall Tz170 - Allow Two Networks To Talk?
Jan 11, 2012I have my modem then a switch, and two gateways a Cisco 800, and a sonicwall tz170.The Cisco isn't managed by me, it's on a 172.18.2.x subnet and I only have about 12 addressable IPs.I manage the sonicwall and have all 254 addresses open. The computers have to stay behind the Cisco because it connects to a VPN that the line of business software uses.
I can't connect the two gateways by VPN because I cant control the Cisco.How can I get these two to talk? I have a new server on the sonicwall network and an old server on the Cisco network. I want the computers to be able to see both servers
How To Block Specific Domains In Sonicwall
Apr 5, 2011How do I block specific domains (pandora.com, etc.) in the Sonicwall? It seems like this would happen in the CFS but do I need a subscription for this? I don't want to subscribe to Sonicwall's filtering list, I just want to block a couple specific domains.
View 9 Replies View RelatedSonicwall VPN Connected But Says Unidentified Network?
Mar 24, 2011At work, I am able to connect to sonicwall and log onto SAP.At home, I am able to connect to sonicwall, yet I can't get onto SAP.I am sure that this is a non-SAP related issue because I can use other VPN's to connect to other SAP systems. In control panel -> view network status, sonicwall says 'unidentified network' which I believe is causing the issue. Normally it wouldn't say this
View 1 Replies View RelatedDifference Between Sonicwall And Netgear Fvs336g?
May 10, 2011I need to replace my old sonicwall firewall. I was looking at the latest Sonicwalls, but they are really expensive if you get all of the services. For the TZ 210 - if I go for just the firmware updates without the gateway security services, how much better of a firewall is it than a Netgear fvs336g?
View 3 Replies View RelatedNetworking :: Sonicwall TZ 200 Cannot Ping The Server
Dec 17, 2012Not sure what's going on with this thing. Unfortunately I'm 3 hours away from where it's installed. We put it in place about 3 months ago. It's set to use failover and load balancing. When I installed it I tested the failover and load balancing and everything worked as it should. The past 2 weeks the unit has not been failing over when one ISP drops. This requires a power cycle of unit to get the secondary on X2 to pick up. Data collection is turned off. Probing is turned on for both WAN ports. While both ISP's are up it load balances fine. I was there last week and pulled the patch cables going to the modems and it didn't skip a beat doing a constant ping. Just randomly it takes a shit when one ISP goes down. Takes out the network as well as no internal resources are reachable as well. Can't ping the server from any PC's and such.
It's running an older firmware. 5.5.6 from Nov 2011. 5.8 is currently available. I'm just leery about flashing a new firmware remotely.
Anything like this before with these units? We have plenty of 170's and 180's in place that are trouble free.
Cisco VPN :: ASA 5510 - Internal IP From Sonicwall LAN / Setup A VPN Tunnel?
Nov 5, 2011I am trying to setup a VPN tunnel between a Cisco ASA 5510 (Version 8.2(2)) and Sonicwall TZ200. I got tunnel up and going and I am able to ping the Cisco ASA internal IP from the Sonicwall LAN but nothing else works.
When I try to ping a host behind the Cisco ASA from the Sonicwall LAN I get the following message "Asymmetric NAT rules matched for forward and reverse flows;
[code]...
Cisco VPN :: How To Communicate Sonicwall To Switch 2960 Remotely
Sep 16, 2012i have one sonicwall NSA 240. it is directly connected to ISP and other interface connected with cisco Layer 2 switch. my que. is that. how to access that sitch remotely ??
sonicwall 1st interface connected with ISP (pubilc IP) and 2nd interface connected with cisco switch with private IP bocz there NAT configuration. i m able to access sonicwall and i m getting ping up to sonicwall bt i cann't able to ping cisco switch.. i think some i need a some missing in sonicwall configution like telnet or VPN
Installing Sonicwall Global Vpn Client 4.2 In Windows 7?
Mar 20, 2011When I start the installation of sonicwall vpn client 2.4 in Windows 7 that sends me the following message "unable to manage networking component. operating system corruption may be preventing installation".I use the version 2.4 Windows 7 32-bit?
View 2 Replies View RelatedSonicwall Router - Every 1 Minute The TCP Connection Is Dropped?
Sep 1, 2011we got a Sonicwall router and we have been having stability issues. Every 1 minute the TCP connectio is dropped as well as UDP packets. This router is connected to a T1 connection and its requesting a DHCP lease every couple minutes as well. We originally had two WAN connections, and we have disabled the second one because someone thought it was that, but obviously it has to do with the internal network. This is a dual WAN router.
View 4 Replies View RelatedPalo Alto 2020 Versus SonicWall
Sep 6, 2012So my company is replacing firewalls. In our EU HQ, they went with Palo Alto 2020 models to take the place of Cisco PIX and an IBM IDS box.However, as I'm responsible for the US branch, I'm re-evaluating their decision for our office. We currently have a Cisco 5510 and the same IBM IDS box behind it. Everything works, so I'm wondering if a PA device is worth the upgrade cost, but on the other hand, you can't really put a price on security. The application control, IPS, anti-virus, etc etc are all cool features that might be worth implementing now.
My questions is - why is PAN so expensive? As an example, Sonicwall's NSA 3500 with similar specs are coming in at 1/3 the price for the same feature set, and lower yearly cost. I've seen the demos, and the interfaces are both pretty slick - at least compared to what I have now. The all have the gateway security features and Deep Packet Inspection so what am I missing? I know PAN is all the rage right now in the networking world, but it seems like they're somewhat riding the fanaticism from their marketing teams - similar to Apple customers. We could also debate the differences between what's marketed as UTMs and NGFWs, but from the "black box" perspective (what comes in, what goes out) - aren't they more similar than different?
If I ran the office, I'd also look at Untanged and other vendors, but my boss wants something with a little more brand recognition. Anyway - I'm asking the Horde what's up since I'm not a networking guy by trade - more sys admin - but this office is my responsibility.