Network Security

I'm trying to find an example of a config for PIX515 running PIX 7. The PIX has 3 ports:outsideinsidedmzI have the inside segment configured on 10.0.0.0/24 and I want to have the DMZ segment on 172.16.0.0/24. It currently has splittunel configured ...

Hi,All applications, I started on my latop, triger the rule 178."The process 'C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE' (as user KFKI\eperjesitamas) attempted to call the function VirtualProtect from a buffer (the return address was 0xa...

I have two pix515E,now I want the two pix515 can failover eachother,so I have a ethernet2's dedicated link for failover.E0 is outside interface and the e1 is intside interface. Now if e0 get down ,failover will work?And when if the link between two ...

Hi, Here's my hardware layout:I've got a Pix 515E UR w/ 6 ports @ ver7.1(2)I've got two T1 connections to the internet.Currently I've got the following interfaces: inside(sec level 100), outside(sec 0)(1st T1), dmz(sec 50) and T1(sec 0)(2nd T1).The i...

Just received a new Cisco 871W to replace Pix 506E (firewall + SiteToSite VPN). I downloaded new IOS that supports multiple Vlans and installed in 871W. I try using ASDM express to config the router but i was unable to copy or match config form pix t...

Why is it 1G ? what's purpose ?

We're trying to remove all the ACL's that have hitcnt=0 from at least 3 Pix firewalls.There are hundreds of lines and it's a waste of time to go through each one of them.If I weren't so rusty at programming, I could've written a program to do this bu...

In the 4250-sx, there is a copper gigabit interface (ge_0/0) and a fiber gigabit interface (ge_1/0). Can these interfaces be paired together to do blocking or do they have to be the same physical type. What are the disadvantages, if any, of pairing o...

I have been seeing lot of request for Firewall Log Analysis software in these forums. Interested folks can give ManageEngine Firewall Analyzer (www.fwanalyzer.com) a try.

HiI have 1 pix 515 firewall.I know pix has default one inside and outside port.now I want two inside and outside port for two inside network and connect two outside ISP line.it is possible ?. if possible then how ?.Thanksbiplob

I was working on a pix today that had its internal interface connected to heavily used server segment. After adding a static translation to the pix, the server segment started having issues. Think we are thinking that after adding the static, it tu...

hi , i hv a pix 515e wit UR bundle and another pix with FO bundle. I am able to ping the interfaces of the pix with UR bundle. Bt the same configuartion isnt working with FO bundle and am nt able to ping the interfaces. I am attachingthe text of bot...

Is it possible to have client machines inside a PIX sending dynamic dns updates to an AD/DNS server outside the firewall when using NAT? If so, is this supposed to be handled by the normal dns fixup/inspection, or does something have to be specifica...

I have problem with nac 2 and acs 4.0, this is the conf in the switch 3560:aaa new-modelaaa authentication login default group radius localaaa authentication eou default group radiusaaa authorization auth-proxy default group radiusaaa accounting netw...