Network Security

I have a Netscreen to PIX VPN connection. The PIX acts as a hub to other VPN devices. I need to have hosts behind the Netscreen connect to hosts behind a third device. I have attached a jpg file to illustrate the topology. All vpns are up and working...

Is there anyone out there..that knows for sure that a PIX515e-R can be downgraded to a FO status....so that the pix can be used for Failover with an UR PIX that is identical...I've checked for the past two years and noone seems to have an answer...or...

Using a PIX 515 I've allowed external access on port 1677 to 2 NAT'd servers. One server sits on the same LAN as the PIX, the other sits on another site over an MPLS core.I can attach externally to the server on the same LAN, but cannot attach to the...

Hello there,I am new to Cisco Pix and was wondering if I can get some inputs as to where I can go from my situation.I need to open several ports on the Pix 515 we have right now. It has ISO 4.4 (1) install on it currently. My manager is leery about ...

The regex for this sig is as follows (and can't be changed):[Cc][Oo][Nn][Nn][Ee][Cc][Tt][ \t].*[:].*[ \t][Hh][Tt][Tt][Pp]Why can't we make sure the port is specified in the regex to reduce false positives? Something like:[Cc][Oo][Nn][Nn][Ee][Cc][Tt][...

I have seen several references to a no downtime upgrade capability with the Pix 7.x software, but have been unable to find a documented procedure on cisco.com. Can anyone point me to the procedure? Thank you!

Configuration shows ERROR: Command requires failover license6.3 config ip audit name info-sign info action alarmip audit name attack-sign attack action resetip audit interface outside info-signip audit interface outside attack-signip audit attack act...

Can someone tell me if you can replace the ASA-SSM module in an ASA 5500 without powering down the ASA. Here is the steps in the hardware guide.Replacing an ASA SSM 10/20 To replace an existing ASA SSM, perform the following steps: ------------------...

Hi,I have an IDSM2 running IPS5.1(1d)S220 upgraded recently from 4.x. My network has windows desktops (spanned on multiple subnets) whose default gateway is a Cisco 6500 FWSM module. Since I upgraded to IPS 5.x, I am seeing lots and lots of TCP Hijac...

I need to upgrade this ASA device as shown in the subject. However, I have not found documentation that details this process online. I wonder if this process is starting to look more like a router....copy file to flash, set boot parameters, reload......

Hello,I am encountering the following error message "%PIX-6-110001: No route to dest_address from source_address" on my corporate PIX firewall. I am very sure that there is a route in the routing table. In other words, it is just routing between 2 ...

Hi I am trying to create a Site-to-Site VPN connection between a Nortel box and a Pix 525. I am able to get phase 1 up in QM-IDLE status but not able to get phase 2 working. I think there is a routing/nat problem but I am not sure. The inside network...

New user of Cisco gear and this is my first question submitted here so please bear with me ...Have a new PIX 506E with 6.3(5)Have a Solaris system for a tftp serverHave the tftp-server configured on PIX as:tftp-server inside clmco2223 /tftpbootI have...