Network Security

Hoping that you maybe able to help ?.I have 2 x PIX (515) Firewalls in failover configuration, I need to connect an ethernet switch (C3560) split into 4 seperate Vlans to a single interface on each of the firewalls.Basically I have 4 3rd Party vendor...

I already have a site to site vpn set up with a branch office, and all of the traffic that is defined in the ACL traverses the tunnel. My question has to do with Internet related traffic. Is there a way that I can define all internet traffic to go th...

Hi, We recently had to re-install VMS due to a corrupt database. We actually fdisked the hard drive reinstalled Ios with the appropriate patches and reinstalled VMS. Everything has been smooth until I try to upgrade the signatures on my sensors. All ...

We want to enable some customers that are NATed off te inside 10.0.0.0 network to be able to ping and traceroute to destinations outside the Pix. They can traverse the Pix for all other traffic, such as web and email. Customers on the public networs,...

We were testing ips which seemed to break comcast and cox cable users from loading our website. A user from any other isp was not effected. Anyone have an idea?I had roughly 150 signatures enabled using the generic attack-drop.sdf on a 3725 with 256 ...

Newbie here so go easy on me.. I am pulling my hair out on this.What is the proper way to create an event variable for addresses outside my networks? Ie: internet addressesThanksDan

I have a test web server inside our DMZ that accesses a sql server on the inside network. The problem is when I create the access rule access-list DMZ_inf_in permit tcp host 172.16.10.250 eq 1433 host 10.10.2.28 eq 1433 and create the static routesta...

Has anyone configured a Cisco Pix 515e over GPRS (General Packet Radio Service over a mobile phone network) ?Reason I ask is that I tried and as the mobile network provider perform PAT at their gateway (for reserved local addresses to single public I...

One of our most common hosted games suffer greatly at the moment, as we get hit by a mirc script that forces the servers to crash. We have tried to limit the buffer size, i e patching it - but it simply doesnt work against this malware.We are now loo...

Hello all,Does PIX "fixup protocol" command work in both directions? By directions, I mean, from inside to outside and from outside to inside. I know it works for inside to outside, but not sure if it works for outside to inside traffic as well.To be...

I am using three interfaces on a PIX 525. Yesterday I moved a building with multiple subnets from the dmz interface to the inside interface. Most communication is fine. However, I cannot receive inbound connections to one address in one subnet. Th...

Hello. We have a problem where it seems that the PIX is actually dropping all VLANs on a show interface. After a restart they are back and everything works which it did not(of course) do before the reboot. Have anybody seen anything like this? PIX 51...

Hi, Well, I have this strange problem with 6500 and 4215. Everything works just fine, sensor is blocking and no real problem with that.But, I get high cpu usage on my 6500 device whenever IDS is accessing it for ACL configuration.I tried to sniff on ...

Where can I find a listing of the threats that are mitigated. We are comparing/evaluating products, and one primary need is spyware blocking. I know it lists spyware as one of the 'anti-x', but there is no "meat" to the claim. Has anyone installed an...