Network Security

I have Pix 501 ver 6.3, and have configured pptp.I can connect to the Pix from Microsoft pptp client from the outside , but cannot access any inside hosts, any ideasBuilding configuration...Cryptochecksum: e600b3d9 0bc5e602 9f7a3cf5 3eeedc54[OK]tci-g...

We were told when the primary pix failed over to the failover pix. The failover pix would run a set number hours and then reboot and this would occur every set number of hours until the primary is replaced. Is this true? and if so what are the set nu...

I need to configure one firewall to run OSPF using only a single interface. I need to configure a second PIX 515 supporting OSPF over 5 interfaces including the outside interface. How do I block routing updates from leaving my private network out my ...

I have a question about putting mail server behind inside interface using static command. It seems like works fine. However, I get "incomplete" message when I looked at PDM config since I put access rule sourcing and destination on the same interface...

HiWhile trying to upgrade IDS 4235 (Version 4.1(1)S47) using FTP or IDM, it gives "Error: exp timeout" message. What could be the reason?If the FTP server is a Windows XP machine, and the signature/service pack file is in C:\Inetpub\ftproot, what is ...

I am using ipsmc 2.2 on CiscoWorks VMS server and whilst in the 4.X signature configuration engine, if I try to open any of the parameters for sting.tcp engine I receive the following error:“Object loading failed. An error occurred while trying to lo...

Is it possible to pass RealPlayer/UDP traffic thru the PIX firewall with only PAT configured?If not, is it possible to pass a single GRE or IPinIP tunnel thru the PIX with only PAT configured?

Is there a command to clear active IPSEC or PPTP tunnels from the PIX?

Hi all,We have a 515E running Fos 7 .We need to configure the pix to log to two hosts with different trap levels.ie to host A on trap info and host B on trap warning...why this is required is Host B is behind a low bandwidth pipe .Any pointers apprec...

Hi,I'm trying to implement truted connection feature for my NAC project. I use VirusScan Entreprise v 7.1. And it is required to download Common Management Agent v 3.5. I have two question :1. I would like to know if somebody knows how to get that ag...

Per my previous post ---[In a full "Nat 0" envrionment with the PIX Functioning as an VLAN ACL Filter]*) When a packet gets blocked by the default ASA policy -- that of a packet with a source in a lower security level traveling to a higher security l...

The Archived Pruning files from the VMS Event database contain the alerts that are pruned to keep the database a reasonable size. Each time pruning occurs a new directory is created, named after the date/time of creation such as:01012006_061416Within...

I noticed that the S214 signature upgrade contains a couple 5.1 only signatures (see below)? Given all the problems customers are having with this release, and Cisco's troubleshooting efforts being limited to "rebuild as 5.0", this is quite insulting...

I have a question for you who are already using the IPS signatures to block traffic. When you started setting up these signatures what guidlines did you use? I'm trying to develop a strategy for my company's activating of signatures.