I would like to have some help to configure a VPN for 2 cisco 836. The scenario is as follows:SITE1 -> CISCO836 -> ISP {INTERNET} ISP -> CISCO836 -> SITE2;The LAN SITE1 should be available on the LAN SITE2 and vice-versa.I would like to thank you for...
Which are the main differencesbetween PIX FW and the new ASA55xx ?Will the ASA55xx in the future take the place of PIX family orwill the two products coexist ?Which the criteria to choose between them ?Thanks to anyone will answer.Alessandro Asson
Hello all,I'm trying to configure a SPAN monitor session on a 7606 router. interface GigabitEthernet3/7 description to IDS01 SPAN Port no ip address speed 1000 duplex full switchport switchport trunk allowed vlan 4,5 switchport mode trunk spanning-...
I need to deny all Internet access to certain hosts at various locations. We are using PIX 501 and 506 firewalls to create a full VPN mesh between offices. How do I configure access-lists to deny Internet access to only a select number of hosts?
I need some help configuring SSL packets forwarded to a webserver. The problem is that the pix is live and is already forwarding SMTP to mail. but we need to use the same ip which the mail server utilizes for SSL web.The xternal pool available isext....
hi,i have a PIX 525 with 2 FE ports and 1 Gig Port. I wanted to use the GIG as the inside interface. Is it possible to swap the Inside from Fe to GIG and used the FE for DMZ?regds,T Singh
Hi, that's the Problem:When I try to connect MSN it's not possible.I saw that on the firewall:---305011: Built dynamic TCP translation from inside:inside-ip/1166 to outside:outside-ip/55586302013: Built outbound TCP connection 75493 for outside:65.54...
When I am configuring two firewalls in failover, do I have to use three IP adreses per interface pair or I can go only with one, real one? Problem is that behind my firewall I have routers and I used 30 bits IP subclass. And now I want to add failove...
Hi All,We have been using Cisco PIX's for more than 5 years now, and vpn tunnels have been part of many configurations through time. Now I finally got brave enough and upgraded a pix to PIX OS 7.0.2 from 6.3(5)It was a mess to change the configuratio...
I have taken on managing a CSA MC with version 4.0.3.739 + 4.5.0.565 agentsI cannot upgrade the 4.0.3.739 agents to 4.5 because of the mandatory Windows System Module preventing any action to the Agent Service Control. If I remove the mandatory WSM t...
Recently i join a new company where i find very unstructured network we have three cisco catalyst 2950 one Cisco 2620 router, three 3com 4420 manageable switches and seimens wireless lan (Gigaset SE505 cable/dsl router / bridges) and few un-manageabl...
We have a VPN 3005 concentrator that connects to our backbone switch. We have about 6 sites who have the following subnet:site A: 172.16.x.x site B: 172.17.x.x (etc)When a user is at home, hotel, or directly connected to the Internet and they connec...
I want to redirect all http/ftp traffic through proxy server from the PIX. The proxy is 10.133.1.49 and PIX is 10.133.6.10. The default gateway for the hosts on the network is 10.133.6.10. Is my logic sound?
We have deployed Pix 501's to small remote offices. Most receive dynamic IPs from their ISPs, they connect to our 3005 concentrator here in our home office. The Pixes are configured using Easy VPN, and are in network extension mode. Clients sitiing b...
