Network Security

We have noticed that when the syslog server becomes unavailable that the pix generates large amounts of ICMP reverse path check errors. Can some one explain why this happens and if it can be prevented. Thanksmarcus

I have a concentrator and trying to tunnel everything fromt the remote site but when I put in 0.0.0.0/255.255.255.255 I ger an error in concentrator

is it possiable to put dns inside DMZ?if so Pls give me some knowledge.Thanks.

Hi All,I've just installed SNMPc (6) and discovered various parts of the network.When Polling the PIX firewalls (running ver 6.3x) the inside interface responds but the DMZ interfaces and the outside interface don't.They are being polled using status...

Hi,What is the difference between FWSM modules of 6500 switch vs PIX firewall hardware.Also can somebody give the PRO's and CON's of both the module when positioning.Which one is better FWSM or PIX firewall.RegardsDeepak

Hi everyone.I generally do NOT do networking, so I may be a bit slow.I'm trying to connect a branch office to a head office with two PIX 501s.I'll need ping, traceroute and all windows packets to traverse the system.The system topology is as follows:...

I have a problem with inside routing on a pix 515. The pix has inside ip 192.168.200.254/24 and is acting default-gate to all nodes on this net. There is also a vpn router on the inside with ip adress 192.168.200.245/24. vpn router has a default rout...

I am only a CCNA student, so please be gental...I am trying to configure a Cisco PIX firewall version 5.3.Here is my current setup:PC <-- x-over cable --> firewall <--- router ----> InternetThe inside interface has an IP of 10.27.164.254, and the out...

There was an emergency notification last night that I want to be sure everyone has seen:1. Emergency IPS Version 5.0(5) Service Pack to be Released on 10/28 to Address CSCsa85330An emergency service pack will be released later today (October 28...

Yesterday I install a new 5.0.2 image on IDSM-2 module and works fine. Then I try to upgrade the maintenance partition to version 3. it's popup a message and looks running and not finish for a long time. So I leave it there and go home. Today morning...

Hello,I have a PIX 501 with two interfaces. I am trying to setup a webserver behind the internal interface.I have a single public IP assigned to the interface.global (outside) 1 interfacenat (inside) 1 0.0.0.0 0.0.0.0 0 0I tried static (inside,outsid...

Upgraded an IDS4210 yesterday from 414s186. Used patch 414h, service pack 415s189, and signature update 415s197.Following updates, it appears some event filters are being ignored... particularly the event filter for sig 1107 (rfc1918 private address...

I'm experiencing troubles in adjusting parameters for this 'Long Http Request' signature (5322). We have a lot of legitimate http traffic with rather long http requests (> 1000 char). So I tried modifying all parameters that have something to do with...

We have 4 Pix 535's. two are running ver 6.3 and two are running ver 7.0 We have problems with high CPU on both. This has been on ongoign sisue whoch Cisco ahs not been able to resolve.We cannot get more than 350mbs throughput without the CPU exceedi...

how is asa redundancy implemented. the pix counterpart has a failover firewall which was half the price of the primary pix.is this still true with the asa?thanks