Network Security

All -->After adding a crypto map entry for a new tunnel, after entering:cry map vpn 11 ipsec-isakmpThe PIX hangs, and outbound internet connectivity drops. Weird! Any thoughts? I'm accessing this device remotely, and can't have this happen again. As ...

Hi,IDSM2 event viewer shows TCP Hijack alarm for one of the desktops in my network as source and Windows ISA Server firewall as the destination.The event has fired only once. I am not sure if I should ignore this or how to go about troubleshooting th...

When I enter a rule on the firewall via CLI such as:access-list dmz-in permit tcp any host 10.10.10.100 eq tcpaccess-group dmz-in in interface dmzI look at PDM and the rule is marked "null rule". If I edit the rule in PDM, the destination and source ...

Hi there!! I'd like to know what's the best practice to document the pix firewall configuration. Nowadays I'm using the Excel to do it, but I don't know if this is the best way. Which are you guys using to document your firewall configuratin???..M...

This may be a silly question but here goes:I have to set up two VLANs that do not speak to each other but use one uplink to the internet. I know how to set up VLANs and I know how to set it up so that it does not talk to each other. However, I only...

Hi,We were using pop3 before for our email, but now we have our own exchange server, so what do i need to do inorder for the mail to be forwarded on to our exchange server, which sits behind the pix 501, we are using version 6.3Thanks for all your he...

Does anyone know of a way to tell SECMON to not show an event in the Event viewer but still have it in the DB to report on? Example would be IIS Unicode sig, this fires all the time on our sensors, we have Deny actions setup and do not need to see th...

Hi,Please can someone help me. I'm really new to this so it might sound trivial you all. We have just purchased a PIX 501 firewall and I'm trying to access the CLI I type telnet 192.168.1.1 (internal IP of 501) and it denys me access. Am I doing t...

Hi! I have a ASA 5520 With AIP-SSM-20 and I have a question about Application inspection. I am not sure about the features in the command “class class-default”. Is the match default-inspection-traffic and the inspect command associated with it, unnec...

Hi. Does anyone have any information as to how best to use thin client conmputing within a NAC regulated environment? I wish to implement NAC to secure my laptop/desktop population, but want to know of any ideas when it comes to thin clients and pr...

Please,How could I enable pptp through pix, without problems, time outs, warnings, etc..The client VPN is in the inside and the server is in the outside.fixup ?access list ?static ???To reach the outside there are two firewalls pix.Thanks.

I have upgraded 6.3.4 to ver 7.0.4 to use pix 535 in transperant mode. I just want use one network on this box. Please help me to configure this.

Hi,I have 5 networks with 2 routers behind PIX 7. I tried to assign route to different Networks located inside Pix in Pix. A Sample configuration isroute inside x.y.z.0 255.255.255.0 a.b.c.1The local segment has inside interface of PIX as the default...

Can I use a dns entry instead of an IP address (208.134.161.5) in the following:access-list inside1 permit ip 10.0.0.0 255.0.0.0 208.134.161.5 255.255.255.0

I've spend many hours over the last week working on intermittant sensing interface failures on our IPS sensors (models 4235,4240,4250,4255) after an upgrade to 5.1-1a. I even rebuild 6 sensors from scratch using an 5.1-1a ISO image, and 5 out of the ...