I have an SMTP gateway in a DMZ. When I query MX records using UDP for certain domains using my internal DNS server as the DNS server the responses fail on certain domains that have large responses. My initial thoughts are that the DNS UDP packets ar...
I have been able to get multicast to work throught the my PIX 515E running 7.12. That was not a problem. What I can't seem to get to work is mtrace through this firewall. Can this be done?I have tried different combinations of rules allowing response...
Hi, Consider a case of CTA 2.0 with 802.1x supplicant talking to a 802.1x L2 NAC enabled switch and having ACS 4.0 (for authentication) which is in turn talking to a Microsoft Active Directory. I installed the CTA 2.0 client and I could see the optio...
I have pix 506 having version 5.2(6)i want to enable line number in the pix access-list as given below but i get error message:pix(config)# access-list 104 line 1 permit ip any anyERROR:<line> not a valid permissionType help or '?' for a list of avai...
Hi all,I need to downgrade/reimage a 4215 sensor from 5.x to 4.x. But I cannot seem to find any good documentation on how to do this? Can anyone please point me to the right documentation or hints?Kind regardsKelvin Dam
Hi,I have IDSM-2 with 5.0 earlier I was using trail key recently I got the license key from Cisco. I updated the same with the proper procedure, still it is showing trail key. Please let me know any way we can go for permanent license key or the way ...
i need some help in configuring the idsm2. I have configured the 6509 switch to capture network traffic using SPAN. i have mentioned vlan as source, for the source SPAN traffic. but after specifying the capture destination on the 6509 (a physical por...
I have PIX 506. I have two types of users in my lan 1)Users having full access 2) users having few sites access.i want to create access-list such that users having full access cannot open a few sites along with users of 2) type cannot access those si...
Hi Guys,I recently upgrade my site which has a single Pix515e and running ver 6.3(3) with two redundant pixes 515e running 7.0(2). Besides configuring failover configuration differently, I copied my original configs and pasted on ver 7.0(2). Everythi...
Hi,1: I would like to implement remote VPN connection authentication with AD (No radius) PIX 515e 7.11 .I found how to implement the AD authentication on this forum (aaa-server ntauth protocol nt)Would it be better to use LDAP/Kerberos authentication...
I'm trying to find an example of a config for PIX515 running PIX 7. The PIX has 3 ports:outsideinsidedmzI have the inside segment configured on 10.0.0.0/24 and I want to have the DMZ segment on 172.16.0.0/24. It currently has splittunel configured ...
Hi,All applications, I started on my latop, triger the rule 178."The process 'C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE' (as user KFKI\eperjesitamas) attempted to call the function VirtualProtect from a buffer (the return address was 0xa...
I have two pix515E,now I want the two pix515 can failover eachother,so I have a ethernet2's dedicated link for failover.E0 is outside interface and the e1 is intside interface. Now if e0 get down ,failover will work?And when if the link between two ...
Hi, Here's my hardware layout:I've got a Pix 515E UR w/ 6 ports @ ver7.1(2)I've got two T1 connections to the internet.Currently I've got the following interfaces: inside(sec level 100), outside(sec 0)(1st T1), dmz(sec 50) and T1(sec 0)(2nd T1).The i...
