About greeng

From what I can tell, it isn't possible to set a Management Profile on a virtual wire?  We wanted to take advantage of a response page for URL filtering but cannot seem to do so due to virtual wire.   Thanks, ... View more

Currently we have our Security Policies setup in a way that the name of the rule is the server and the tag identifies what resource is being accessed (URL).  As it is when I receive an alert of malicious intent on a rule it sends me the Rule name and the usual information.  I'd like to be able to include the tag information in the Email server profile if possible.  This is beneficial for the servers that host multiple websites/applications.   ... View more

I believe I know the answer after looking around. We have NATs that work fine when it is 1to1. But what about  1 External IP that represents many Internal Hosts?  We have multiple websites that when you do a lookup in DNS, they all point to a singular public facing IP.  That public facing IP is represented by our ISA. External                                             Internal mysite.org - xxx.xxx.67.18          >  192.168.1.20 mysite1.org - xxx.xxx.67.18        >  192.168.1.21 mysite2.org - xxx.xxx.67.18        >  192.168.1.22 Could this be done by changing addresses (Objects > Addresses) to use FQDN instead of IP? So the thought there would be: 2 New Objects ------------------ Name: mysite.org (outside) - FQDN: mysite.org Name: mysite.org (inside) - IP Address: 199.168.1.20 NAT Policy ----------------- Src: untrust Dst: untrust Src Addr: Any Src Addr: mysite.org (outside) Dst Addr Translation: mysite.org (inside) Security Policy ------------------- Src: Any Dst: mysite.org (outside) Thoughts? ... View more