Network Security

Hi,I am very new to PIX and need some help with setting up rules for a new network.I have three interfaces (inside 100 - 172.16.10.0, outside 0 - 192.168.10.0 and Demo 10 - 172.16.11.0). On the Demo network I have three devices with ip addresses as 1...

There seems to be some ambiguity on PIX upgrade requirements, i.e The 7.2(2) Release notes stateVersion 7.2(2) requires the following: 1. The minimum software version required before performing an upgrade to PIX Version 7.1 is PIX Version 7.0. If you...

Hello,i have installed an CSM 3.1 (build 482)on a Windows 2003 Server.When I read out the Configuration from my ASA5520 (7.2.(19)it still works fine, but the Configuration from my VPN-Tunnels to my Locations will not be read out.Any Idea for my Probl...

Is there a signature available for the new Bind 9 DNS Cache Poisoning vulnerability/exploit.See referencehttp://www.securityfocus.com/bid/25037/info

I can't seem to find a good answer to this... I need to have certain hosts be able to run blocked applications on other hosts. Can I set exceptions by username and/or IP address?

I'm trying to block MSN and Yahoo! messenger file transfers, while still allowing chat and other services. The problem I get is when I try to apply the inspect rules in my policy I get an error that I can't have multiple inspect rules Error:=========...

Is there any way to allow broadcast traffic through a PIX in transparent mode? No matter what ACLs I build, it gets blocked. Even if I build an ACL which denies it explicitly, it doesn't get logged under that ACL.Thanks!

quick question...if i have 2 route statements:route outside 0.0.0.0 0.0.0.0 192.168.1.1and another oneroute outside 172.10.10.10 255.255.255.255 192.168.2.1...will the first route take precedence over the second one?

Can you NAT External IP to two different Private IP's? Using a Pix515e version 6.3(4)For example I want to direct smtp traffic on public ip address 1.1.1.1 to a spam filter(10.1.1.2) but still want the mail server(10.1.1.99) to send mail outbound as ...

Does anyone know exactly what this process is doing?Kernel functionality has been modified by the module C:\WINDOWS\system32\Drivers\uphcleanhlp.sys. The module 'C:\WINDOWS\system32\Drivers\uphcleanhlp.sys' is used by entries in the System syscall ta...

Hi,I have 2 ASA5520 with VPN plus license, running A-A mode, the current OS version is 8.0(2). Do I need apply and install license while I downgrade it to 7.2(2), or upgrade from 7.2(2) to 8.0(2)?Best Regards,Jackson Ku

I needed to purchase a block of 8 IP's for a few new servers and my ISP gave me a set of totally different IP's than what I currently have. How can I add these to my network and is it a pain to setup? The current public IP for my 5510 is 209.254.56.X...

There is agroup of network conected to a Cisco 1811 ISR through site to site VPN. Everything goes fine but after 5 or 6 hours of traffic , the users can not reach any more the servers and even when the routers are restarded , the problem remain the s...