Network Security

I have PIX 506. I have two types of users in my lan 1)Users having full access 2) users having few sites access.i want to create access-list such that users having full access cannot open a few sites along with users of 2) type cannot access those si...

Hi Guys,I recently upgrade my site which has a single Pix515e and running ver 6.3(3) with two redundant pixes 515e running 7.0(2). Besides configuring failover configuration differently, I copied my original configs and pasted on ver 7.0(2). Everythi...

Hi,1: I would like to implement remote VPN connection authentication with AD (No radius) PIX 515e 7.11 .I found how to implement the AD authentication on this forum (aaa-server ntauth protocol nt)Would it be better to use LDAP/Kerberos authentication...

I'm trying to find an example of a config for PIX515 running PIX 7. The PIX has 3 ports:outsideinsidedmzI have the inside segment configured on 10.0.0.0/24 and I want to have the DMZ segment on 172.16.0.0/24. It currently has splittunel configured ...

Hi,All applications, I started on my latop, triger the rule 178."The process 'C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE' (as user KFKI\eperjesitamas) attempted to call the function VirtualProtect from a buffer (the return address was 0xa...

I have two pix515E,now I want the two pix515 can failover eachother,so I have a ethernet2's dedicated link for failover.E0 is outside interface and the e1 is intside interface. Now if e0 get down ,failover will work?And when if the link between two ...

Hi, Here's my hardware layout:I've got a Pix 515E UR w/ 6 ports @ ver7.1(2)I've got two T1 connections to the internet.Currently I've got the following interfaces: inside(sec level 100), outside(sec 0)(1st T1), dmz(sec 50) and T1(sec 0)(2nd T1).The i...

Just received a new Cisco 871W to replace Pix 506E (firewall + SiteToSite VPN). I downloaded new IOS that supports multiple Vlans and installed in 871W. I try using ASDM express to config the router but i was unable to copy or match config form pix t...

Why is it 1G ? what's purpose ?

We're trying to remove all the ACL's that have hitcnt=0 from at least 3 Pix firewalls.There are hundreds of lines and it's a waste of time to go through each one of them.If I weren't so rusty at programming, I could've written a program to do this bu...

In the 4250-sx, there is a copper gigabit interface (ge_0/0) and a fiber gigabit interface (ge_1/0). Can these interfaces be paired together to do blocking or do they have to be the same physical type. What are the disadvantages, if any, of pairing o...

I have been seeing lot of request for Firewall Log Analysis software in these forums. Interested folks can give ManageEngine Firewall Analyzer (www.fwanalyzer.com) a try.

HiI have 1 pix 515 firewall.I know pix has default one inside and outside port.now I want two inside and outside port for two inside network and connect two outside ISP line.it is possible ?. if possible then how ?.Thanksbiplob

I was working on a pix today that had its internal interface connected to heavily used server segment. After adding a static translation to the pix, the server segment started having issues. Think we are thinking that after adding the static, it tu...