Network Security

I have lots of users connecting remote access as well as remote 3002's disconnecting with the above message.I have not been able to identify a trend of any kind or even find more information on what is happening to cause the disconnect.Does anyone ha...

Hi there, im using 3 Pix 501 for a VPN over PPPOE. The first Pix is acting as the VPN Server with an static external IP Adress. The other both establish the IPSec Tunnels to it. The "server" PIX is working on a 2Mbit SDSL PPPOE Connection. The Pix Cr...

I have a Netscreen to PIX VPN connection. The PIX acts as a hub to other VPN devices. I need to have hosts behind the Netscreen connect to hosts behind a third device. I have attached a jpg file to illustrate the topology. All vpns are up and working...

Is there anyone out there..that knows for sure that a PIX515e-R can be downgraded to a FO status....so that the pix can be used for Failover with an UR PIX that is identical...I've checked for the past two years and noone seems to have an answer...or...

Using a PIX 515 I've allowed external access on port 1677 to 2 NAT'd servers. One server sits on the same LAN as the PIX, the other sits on another site over an MPLS core.I can attach externally to the server on the same LAN, but cannot attach to the...

Hello there,I am new to Cisco Pix and was wondering if I can get some inputs as to where I can go from my situation.I need to open several ports on the Pix 515 we have right now. It has ISO 4.4 (1) install on it currently. My manager is leery about o...

The regex for this sig is as follows (and can't be changed):[Cc][Oo][Nn][Nn][Ee][Cc][Tt][ \t].*[:].*[ \t][Hh][Tt][Tt][Pp]Why can't we make sure the port is specified in the regex to reduce false positives? Something like:[Cc][Oo][Nn][Nn][Ee][Cc][Tt][...

I have seen several references to a no downtime upgrade capability with the Pix 7.x software, but have been unable to find a documented procedure on cisco.com. Can anyone point me to the procedure? Thank you!

Configuration shows ERROR: Command requires failover license6.3 config ip audit name info-sign info action alarmip audit name attack-sign attack action resetip audit interface outside info-signip audit interface outside attack-signip audit attack act...

Can someone tell me if you can replace the ASA-SSM module in an ASA 5500 without powering down the ASA. Here is the steps in the hardware guide.Replacing an ASA SSM 10/20 To replace an existing ASA SSM, perform the following steps: ------------------...

Hi,I have an IDSM2 running IPS5.1(1d)S220 upgraded recently from 4.x. My network has windows desktops (spanned on multiple subnets) whose default gateway is a Cisco 6500 FWSM module. Since I upgraded to IPS 5.x, I am seeing lots and lots of TCP Hijac...

I need to upgrade this ASA device as shown in the subject. However, I have not found documentation that details this process online. I wonder if this process is starting to look more like a router....copy file to flash, set boot parameters, reload......

Hello,I am encountering the following error message "%PIX-6-110001: No route to dest_address from source_address" on my corporate PIX firewall. I am very sure that there is a route in the routing table. In other words, it is just routing between 2 di...