Network Security

Can anyone tell me why PIX's must specify interface name to route?PIX:route outside 0.0.0.0 0.0.0.0 203.1.1.2 1ROUTER:ip route 0.0.0.0 0.0.0.0 203.1.1.2

I don't see the usefulness of the logging class command and what it gives compared to logging list command ;if somebody could clarify , thanks in advance

Hello, I hope that you guys can help me out here. Currently I am trying to get FTP access to a machine from inside my DMZ from our private network via the external network. I have set up static commands for a number of machines that will be put into ...

Firewall had blocked access to the internal IP address which was mapped with a public IP address. This occured after I tried connecting the server directly to the public IP address bypassing the pix. static (inside,outside) 70.45.5.8 192.168.0.145 25...

My customer has a 1711 router and he'd like to enable IPS on it. It's going to be upgraded to 12.4(4)T, which contains over 1000 signatures.However, I checked in the 1711 datasheet and it says 1711 can only monitor 100 IDS signatures.What I would lik...

Attached is my network design of the PIX and the IPS in promiscuous mode (non-inline). It doesn't look sound:1. Is it possible to set up the IPS in non-inline mode with two sensors? 2. Can the IPS direct blocking commands to the PIX through the Deskt...

Is it possible to filter and block packets based on TTL using the IDS feature set on a 2611 router? I'm a small ISP, and I'm looking for a way to prevent people from using ICS or routers to share their connections.MikeCCNA

Client has non Cisco environment. Foundry and Nortel on the Edge w/Siemens IP Phones. Likes what he sees but not sure of interoperability in this environment. Comments?

I have two PIX 515 firewalls in failover configuration. If I unplug the active unit from the network, failover occurs as it should. However, if I turn off the active unit, no failover occurs. When I turn the active back on, failover occurs to the sta...

Hi everybody,I just make a VPN site-to-site (two cisco series 800) using GRE TunnelingThe first network A is 192.168.1.0/24 with windows 2003 domain server, and second network B is 192.168.34.0/24 with only client connected to internet and throught v...

I never noticed this in 2.1. In 2.2 SecMon, when I resize the security monitor window, it appears to hang. The resizing of the window takes a long time to update.Can any one on the list please explain why?

I have a remote switch with an IDSM2 that is not functioning properly. I can connect to the module via SSH using the "service" account and get a Linux root shell. I have rebooted the sensor but no luck. Is there a way to restore the operating partiti...

Good morning -- Working with a customer who is using CSA v4.5 and Veritas Backup Exec 10.x and is attempting to backup a Windows 2000 File Server (SAN attached) with a high-volume of data. When the backup runs, they noticed that the backups took an E...

We have a pix 515E pix fos ver 7 configured to syslog to 2 hosts on trap level info.We have noticed whenever any one syslog is stopped...and do a icmp debug trace..the pix is found to be receiving icmp voluminous destination unreachable from the sysl...

I'm a newbie on this and I tried (without luck) to connect to the PDM after many attempts, I get the message that PDM found the ALIAS command in it cannot continue, the message recommend to use Outside NAT, but I don't know how replace fine...the ali...