Network Security

Hi,after I updated the OS on the pix I have problems accessing https Sites from inside. I tried to change the MTU on the client, but no effect. I not quite sure but it may be possible that sslv3 is the problem. Anyone any ideas or did you face the sa...

Hi,I am new to pix and i am trying to configure failover using the serial cable.My primary pix have the following config.ip address outside 20.24.43.1 255.255.255.252ip address inside 10.1.1.1 255.255.255.0failoverfailover timeout 0:00:00failover pol...

Just want to make sure before telling a customer to purchase this firewall. Basically this customer uses about 15 subnets (over the course of a couple years has gradually grown needing more and more IPs). But some of his servers, for various reason...

Hi,Is there is a command to check what source address traffic is coming on PIX interface. Can we see the translate table, of which outside traffic was converted to NATed to address of higher secutity level in detail. ( PFSS unavailable ) Can "show...

I work for a reseller/MSS. Most of our customers are still running ver 4.1(5). One of our new customers has an NM-CIDS with IPS ver 5.0(2) already loaded. In the past we've just down graded the version. What are the differences in licensing/reg...

Hi,I'm trying to configure external policy for my NAC.I'm using CTA 2.0 + virusscan 7.1 and ACS 3.3. I have 3 questions:- Could the ePolicy orchestrator server 3.0 act as the external server?- If yes what does the right URL that have to be enter on t...

There are some signatures that have '********' for a value in certain options. The example I'm working on currently is 5561-0 thru 5561-2, Windows SMTP Overflow. 5561-2 for example has this value for both the regex string and the service ports. Wh...

I am considering to deploy ASA5500 for an eterprise who has only one large location for their external data communications through internet. Do I need 4 (8 for resilient) separate ASA5500 boxes to take care of firewall, anit-X, IPS and VPN requiremen...

Hi,I have arunning PIX 506E in my office and to reduce cost. I want to establish a pptp or l2tp VPN betwwen home users and Office .Is this possible with PIX 506E?If yes then How ?Thanks,CK-NET

Hi all, This may seem like a strange question but i just wanted to clarify the Pix behavour for blocking traffic. If you apply your access list to allow port 80/443 and then deny everything else (i know there is an explicit deny but i still like to...

Starting from 12.3(5) ending with 12.3(17a) on all our 7200 and 7500 routers, applying ip audit input on internal interface or ip audit out on external interface immediately stops all https websites. I was trying to disable all https and http signat...

Hi,I have a PIX connected to a switch (Inside interface) and to a router (Ouside interface).On the switch, I have somes servers. Each server have an ethernet inferface with a public ip address (on the network 80.64.226.1/24, the first address is my r...

How do I determine the software bundle I have installed on my pix 515e?

It is documented that 2 4250-SX-INT= can be installed into the 4250. I would like to know which of the following combinations are also supported by 4250: 4250-SX-INT= + IDS-TX-INT=, IDS-TX-INT= + IDS-TX-INT=, 4250-SX-INT= + IDS-XL-INT=, IDS-4FE-INT=...