Network Security

Ok, finally convinced the boss to buy a 4240 and I am setting it up....As far as Never Block IP's are concerned, is it profitable to use the Sensor IP since it uses that IP as the Source Address?What I mean is..say this is your setupINET --> PIX -->...

Prior to the upgrade of SecMon/IPS MC 2.1, you were able to copy individual filters from one sensor within a group to a selected number of sensors in within a different group.Group A --> Group BSensor1a Sensor1b Sensor2b Since the...

I have searched everywhere, but am unable to find the answers I seek. Is there a decision matrix on the differences between the PIX(s) versus a 2800/3800 with Firewall Featureset (Advanced Security) I have a client that would like to know which platf...

I'm having some trouble with my configs. The crypto sessions appear to active, but I'm unable to get traffic accross for one side to the other. Can someone point me in the right direction.

Hi. My question is the following.It is possible to establish backup statics routes on Cisco PIX Firewall with IOS 6.3(4). That is, to create them with metric, something similar to as it does in the Cisco routers?.Thanks in advance,Ramiro Marulanda Z.

Hi,I am planning to deploy the cisco ASA 5520 Active/Active configuration. What are the compulsory modules that i must order for. Is the SSM an optional module or it is compulsory.RegardsNahas

I have a webserver connected to the integrated switch on the back of PIX 501 with an IP address on the same subnet as the outside interface. I want to NAT 0 the IP address so that I can have the public IP behind the firewall. I have enabled NAT 0 for...

I wonder if a pix 515 can act as a http proxy ? If yes which command i have to use to enable http proxy.Regards

Have a PIX520 in the main building and PIX 501’s at remote sites via DSL over the internet. Ipsec tunnels are working fine from inside-to-inside. I can also make remotes talk to the Main PIX dmz interface via a tunnel. The problem is coming from o...

Hi, I'm new with Cisco Pix Firewall 515E and I'm starting for beginners. Let's my first configuration, my lan (inside) work with internet ok but I don't understand why my Dmz configuration doesn't work, this my part show running-config without pubbli...

I've been searching for an oid, or some way to collect the 'xlate count' data with snmp. I could setup a script to do a simple 'show xlate count' but I would love to just simply use this with MRTG. Anybody have any ideas? I wish cisco would add th...

Hi,I have a firewall (515E) with 3 interfaces with OS 7.0. To the outside interface we have a router conected to 1 ISP for internet and to the DMZ we have another router connected to the 2nd ISP for internet.The inside interface is connected to a swi...

I'm not terribly familiar with PIXs, so I'll try to explain. I have a PIX 501 with two tunnels going to different firewalls in Europe. I currently run 6.3.3(132). One site in Europe has a basic ping monitor that checks a server that resides behind...

Hi,I've got this annoying 'issue'with PIX running 6.2.2. When I do traceroute to a destination that are outside the PIX, the pix reports the destination address as intermediate hop address (see hop 4 below). So, from the example blow, if the destina...