Network Security

Both PIXes in a failover bundle appear to have crashed & reloaded simultaneously.The pix details are as follows:Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHzFlash E28F128J3 @ 0xfff00000, 16MBBIOS Flash AM29F400B @ 0xfffd8000, 32KBSystem imag...

When I do sh run in Pix 535 6.3(3), the whole configuration scroll at once. I used to see the config page after page and using the space bar or enter key to scroll through, but now the whole config just scroll at once and put me at the bottom of the ...

I am working on a configuration where a static NAT is configured as follows (I have changed the ranges): static(inside,outside) 10.0.0.2 192.168.1.2 netmask 255.255.255.255 interface ethernet0 nameif inside ip address 192.168.1.1 255.255.255.0 interf...

I have a Cisco 2821 router that sits behind a PIX firewall. When this router is using a PAT IP it can ping and telnet outside public IPs thru the firewall with no problem. Recently I added a static NAT entry so I can telnet to this router from the ou...

Hi,I have 2 active directory forests that reside on either side of my PIX. Forest A is on Inside interfaceForest B is on a DMZ interface security level 50The Microsoft guys would like to setup a trust between the 2 forests.In order to do this, RPC tr...

What is the best way to add an ACL to a firewall for the network object to a specific host. I'm trying to add it so the permit acl is appended to a group of rules in the config. How do i ensure that after i add it to the config it goes under a specif...

Hi,The following error message is getting continuosly logged on to the console of 4215 IDS. " end_request: I/O error, dev 03:41 (hdb), sector 306848 " How to stop this error logging on the console and is it due to Harddrive error? Not able to telnet ...

If i only need a firewall, what is the best option? PIX or ASA? Performance, features,...

I have an ASA-5510 with the SSM-CSC module installed. I am trying to build a policy-map to identify traffic to divert to the CSC module for scanning, but the class-map command isn't supported. I can build the ACL and the policy-map but the class-map ...

HiIs it possible to allow specific users access to certain subnets or would i just have to create a vpn group for each user?RegardsKevin Hobson

HiI have a problem with DNS resolution with the ASA 5510. The DNS server is inside the LAN (x.y.11.0/24) and MPLS clients are coming from a DMZ segment. There is an MPLS Router between MPLS cloud and ASA, the DMZ is x.y.0.0/24 and DNS server is stati...

I was following the procedure for recovering password in pix 506e but something not working when I assign for example192.168.1.1 for pix and192.168.1.2 for pcand connecting them with a cross cable no one of both interfaces can ping to my pcand my pc ...

Can a static nat take a form like this static (in,out) 211.1.1.1 211.1.1.1 netmask 255.255.255.255

Hi all,I have configured an 1841 for Easy VPN and currently using local user list on router for access. Have not really been able to find any information on configuring Microsoft IAS to be able to authenticate users based on the Active Directory Remo...