Network Security

Hi all,when I configure PIX I can use ACLto restrict access with normal lineand combine this line with object-group.My question is ..if it has some other meaning not only cut down lenght of ACL?Could someone explain me all feasibilities of object-gro...

I am trying to change the inside IP address and DHCP range on a PIX 501. The PIX 501 is running 6.3(5) with PDM 3.0(4). When I enter the cli command:ip address inside 192.168.3.1 255.255.255.0The PIX replies: Interface address is not on same subnet a...

hi,PIX outside has been configured for different VLAN's with different network id's. This ( outside ) interface is connected to routers ethernet port. What type of VLAN encapsulation is to be configured on Router port and also on PIX. Does PIX suppor...

I have a L2TP VPDN Connection between my ISP and a router at my site. User Dials the ISP and the ISP forwards their connection to my onsite router using L2TP VPN.We used to run this through a Checkpoint Firewall and had no problems. After taking chec...

Hi,I have a couple of PIX Firewall 515's and have been asked to configure them for our network, but know nothing about these products, and wandered if someone could please help.I'm trying to enable the HTTP server on these 515's but unable to get any...

Hi,IDSM2 on 6500 with 4.1(1)S213I see a lot of signature 3337 events (Windows RPC race condition exploitation) being fired with destination IP address of my active directory server and on port 135. Source addresses are all on the inside.How to tune t...

Hi!I have configured lan/state failover with ASA 5520. When testing failover i loose contact in about 20 seconds is this normal?? does anyone know what time to expect, until the connection recover to secodary unit?/Regards

Hi all,Is it possible to clear the countersfrom ACL configured inside PIX after acommand sh access-list xxxx ?Or, only from desired line of some ACL ?BRjl

Hi,My set up of PIX and ISP router is like this : ISP router is using serial T1 link for internet connectivity for static (live) ip address. This router's eth0 has been connected to PIX outside interface. This interface is configured for one more int...

Greetings.I have a pix515 that is showing PAT entries in show xlate for a whole bunch of customers. But only some of the segments gain access to the outside. Some specifik segments fail to access even though they get PATéd.I have made sure that permi...

Hello,I'm configuring a new pix with 7.0 and having an issue with access-list inside_access_in extended permit udp any any eq domain and line 4 with tcp eq wwwThe traffic pass ok through the pix when I put: line 1 permit icmp any any (htcnt = 8457328...

We purchased a PIX 515E bundle s while back and have been using it for some time now just for firewall purposes, no vpn termination. It was working fine in stateful failover overmode running version 6.3.3. We recently upgraded to version 7.0.4 and no...

Hello,how can i clear counters of especific access list.Version 6.3Thank You.

Currently, I view my syslogs with the Kiwi Syslog Daemon on a box in my dmz. I would like to add syslog viewing on my workstation on the inside interface.Is it possible to enable two logging hosts for syslog viewing?Thanks, Ben

I want to restore ips 5.1(1) -> 4.1.But, Restore was failed.Error Message is below.--------------------------------Error: execUpgradeSoftware : idsPackageMgr: digital signature of the update file was not valid, use CCO to replace corrupted fileTarget...