Network Security

Hi,I have PIX -ver. OS is 6.3(3)- with 3 interfaces: outside, inside and dmz.PIX will be used in intranet without address translation. IP Address must be visible from any interface to any interface, no address translation is required.For examlpe: Use...

Is it possible that icmp type 11 code 0 cause pix to drop traffic?After%PIX-3-313001: Denied ICMP type=11, code=0 from x.x.x.6 on interfaceinsideaccess list denies traffic it otherwise passes

Topology:7204 ----- Dsl/Atm/pppoe ---- C831+ C1601 ---- serial ------ C1601 ---+Eigrp is active on all routers.C831 obtains routes from C1601 remote serial line, but is unable to discover 7204 main site Eigrp routes.Are eigrp hello packets blocked on...

Can anyone tell me how to test or trigger a signature to determine if shun requests from the master blocking sensor (MBS) are actually resulting in shuns in the PIX? Can this same procedure be applied to FWSMs?

I was under the impression that I should be able to access the failover firewall when it is in standby mode. Currently, I am unable to ping any interface, access the firewall via the PDM or SSH. Conversly, while consoled into the standby firewall I c...

Hi all,I upgraded a 4215 from IDS to IPS 5.03 with Sig 181 and the BIOS update. Now I am unable to communicate through the sensor. I can ping the sensor only from int FA1(which I presume is actually FA0/1 in the config) Here is my config:service anal...

Hi Does anyone know if there is an impact to performance on PIX hardware when using pix code 7.x I am particularly interesed in the affect it may have on VoIP. We have a number of PIX 515's and 515E using VPNs between sitesregardscolin

Hi,I have a UR failover bundle of PIX 525 and would like to procure 5 Security Contexts do I need to purchase a license for each PIX in the failover pair or just one. The product no for the context license is - PIX-SW-SC-5Thanks,Anil

Hiya,I'm thinking of installing another NIC on our Cisco PIX 525. Currently there are 3 Fast E interfaces on it, i.e. e0 e1 e2 . I plan to add another one for a second DMZ. I've tried using a 3COM 10/100 NIC but that doesn't seem to work - PIX does n...

Folks, Looking at the cisco software navigator and it tells me that a 3660 router also supports IPS. Does that mean that i will be able to load the latest Policy manager or SDM and manage the IPS functionility? Aso download signatures seprately??Than...

Is there a way to import current firewall settings from a 3Comm firewall into the pix515?

We have set a Cisco ADSL router up and a PIX firewall. I have followed the Cisco article on configuring the firewall but no matter what I do, I can only see the outside addresses if I allow the Firewall to give me a DHCP address. I have tried NAT and...

I have to configure pix firewall 515 vesrion 6.3Please, can somebody help to choose best configuration to enhance http,ftp and smtp process.deny virus, disturb traffic and attack.Best regard

Folks, I have a pix 515. I have 16 MB flash installed on it, i even formatted the flash, but evertime i try to install the 7.0 code it fails and gives me a message that i have insufficient space??? Received 5124096 bytes Flash filesystem recreated. E...

I have a PIX 515E with a restricted Bun, and I wish to a add a nic for a DMZ configuration. In my current config I'm using two nic EO and E1, if I add a sec nic such as a PIX 1FE, do I need to change the license? In addition, is the PIX 1fe the corre...