hello all,I want a PIX535 firewall to be synchronized by an outside NTP server , then all the inside hosts get time from the firewall 。I fail to get time from the firewall .Can anybody confirm that PIX firewall just support to be NTP client ? Thanks ...
Hi,I am planning to use a ASA 5510 for the following scenario:1) two security-zones: one for office, one for exposed services such as mail-relay etc. (dmz)2) one leased line/frame-relay routed via CISCO 2600 is connected to the outside interface of A...
Hi there,I am a little confused with what the inbound means in the command 'aaa authenticaion include ...'. Does it mean the traffic is from low security interface to high security interface, or any traffic come into the PIX?Thanks in advance!Regards...
Hi,We are facing some problem with VPN tunnel from router to router.We are forming tunnel from R1 to R2 on loopback address. It was working ok and suddenly it is showing status as down.I am attaching debug cry ipsec output here in text mode.Here we s...
Hi,In a PIX 515, os Version 6.3(5), I want to prevent traffic TCP ports 445, 3066, 3067 from going from inside to outside (due to us having gotten blacklisted for outgoing Korgo traffic).Here's the relevant config:access-list acl_outbound deny tcp an...
I have a LAN connection to an ASA here in my office, but I'm constantly running into the message in the subject field of this post. When things get really bad, some of my changes make it into the running config while others just end up in the bit bu...
Hello;I'm contimplating on using ASDM as a tool to monitor my PIX 525 in terms of VPN trhoughput, interface stats and perform the security check, all of which the asdm program offers.Currently I prefer to use the CLI to implement change, and I will c...
When using a PIX 506 is there a way to allow the internal network to access the external IP range associated with the outside interface?For example:Web Server: 206.29.137.58 PIX e0: 206.29.137.57PIX e1: 10.0.0.1PC: 10.0.0.10Is there a way to all...
Hi,I have a FWSM that I am monitoring through ASDM. We found out that the clock in the main window does not appear to be synchronized, although the logged packets seem to have the right timestamp.We have the following combination:CATOS 8.5(3)FWSM OS ...
I've been passed a problem from a client trying to connect to a Remotely Anywhere server through a PIX/525.Remotely Anywhere is a remote control application that uses HTTP over TCP/2000. This port is open and theres no inspect enabled. From the con...
HiI would like to know if it is possible to recover a PIX config after a write erase command and reload performed. We have replaced our PIX 515E's with ASA 5510's and are planning to sell the 515E's. We are worried about security leaks if the erased ...
