Network Security

In the 4250-sx, there is a copper gigabit interface (ge_0/0) and a fiber gigabit interface (ge_1/0). Can these interfaces be paired together to do blocking or do they have to be the same physical type. What are the disadvantages, if any, of pairing o...

I have been seeing lot of request for Firewall Log Analysis software in these forums. Interested folks can give ManageEngine Firewall Analyzer (www.fwanalyzer.com) a try.

HiI have 1 pix 515 firewall.I know pix has default one inside and outside port.now I want two inside and outside port for two inside network and connect two outside ISP line.it is possible ?. if possible then how ?.Thanksbiplob

I was working on a pix today that had its internal interface connected to heavily used server segment. After adding a static translation to the pix, the server segment started having issues. Think we are thinking that after adding the static, it tu...

hi , i hv a pix 515e wit UR bundle and another pix with FO bundle. I am able to ping the interfaces of the pix with UR bundle. Bt the same configuartion isnt working with FO bundle and am nt able to ping the interfaces. I am attachingthe text of bot...

Is it possible to have client machines inside a PIX sending dynamic dns updates to an AD/DNS server outside the firewall when using NAT? If so, is this supposed to be handled by the normal dns fixup/inspection, or does something have to be specifica...

I have problem with nac 2 and acs 4.0, this is the conf in the switch 3560:aaa new-modelaaa authentication login default group radius localaaa authentication eou default group radiusaaa authorization auth-proxy default group radiusaaa accounting netw...

We are seeing events triggered by this signature that appear to be invalid. SSH2 connection attempts appear to be triggering these events, when the exploit is clearly for SSH1. The signature is utilizing the SSH1 engine, but ssh1 is disabled on the...

Hi,I'm in the process of upgrading my PIX515E from 7.0(2) to the new 7.0(5) image.First of all i've upgraded ADSM to the 5.05 version from within the ASDM itself via Tools > Upload Image from PC, and overwrite the current file.Secondly I tryed to do...

Any cisco experts can tell exactly how long will the pix active and standby switchover take. It seems too long.

Hi There,I'm implementing PIX 525 FW in my network and I have a setup as follows:100 Mbps internet link, a web server DMZ where I have 4 web servers, an application DMZ where I have application servers, and a DB DMZ where I have my DB servers. I'm ex...

HI all,Currently we are migrating all the rules from a PIX to a Netscreen, has anybody idea about the way to do it with less possible effort?Thanks in advance.Regards,

I would like to convert a RIP environment on one side of a PIX to OSPF, with the goal of improving re-convergence time between routers and PIX. Upon first configuration of OSPF on PIX and Router, I cannot get the OSPF Adj to go to Full. It appears t...

As Cisco CSA license charges are signficantly different from between server and client agents, we need a method, report, SQL query to be able to determine the number servers and number clients used in a given group. This is to allow internal "charge...