Network Security

We have a couple of sites that are hooked to cable connections but tunnel into out network via VPN. We have purchased several Imagistics network copiers for our different departments. At these two sites that tunnel into us via VPN, I cannot access, o...

Hi. I have two PIX 515E firewalls. Each has a connection to a router via the outside interface and on the inside to two Cat 6506's. The PIX's are connected via a failover cable and is stateful. I have an ISDN router on a DMZ on the primary PIX, which...

I have been unable to configure a site to site vpn where the remote site has no fixed ip address using dhcpd. it used to be 0.0.0.0 on the shared key but that does not work under the tunnel group.i have not found any document with it either.anyone kn...

I need to know how to block MS instant messenger with the new PIX 7.0 software.Can anyone help ?Thanks.Rod

hi,Pls find the attached files.New to PIx firewal.128.1.1.248 is not given by ISP. do let me know whether the following can be deleted: 1)access-list inside_outbound_nat0_acl permit ip any 128.1.1.248 255.255.255.248 2)nat (inside) 0 access-list insi...

I have strange problem, I don’t understand where the problem is?I have one website on MS 2000 Advance server with IIS 5.0, one CA server built-in into MS 2000 Advance server on another computer, my website is secured certificate issued by this CA cer...

how do you enable a permission for a passive mode FTP connection, is it just by using the fixup protocol ftp 21 or is there other commands that need to be implemented also? Your response would be much appreciated Thank you

Hi,I'm looking into sort of a rock/hardplace issue with VPN clients.(Various concentrators) We need to use some split tunneling to allow remote clients to access local printers, but we want to enforce the "Use Integrated Firewall Policy". The probem ...

Greetings,I would like to block any ICMP requests from the outside; returning host unreachable, etc. Would the syntax be something like:icmp deny host 1.2.3.4.5 echo-reply outsideI would also like to permit ICMP from inside to outside.What would the ...

Hi , Windows2000server(inside):PIX: client(outside) I am trying to login to active directory server from a windows client.I have opened all the necessary ports and mapped a global ip address to the inside server.The server is also acting as a dns.Now...

Hi All,Is it possible to have static translations to two diferent ip address ranges on the external interface of PIX?We want to configure pix for BGP multihoming scanario, We have two internet connections and one pix on each. Both PIXs need to accept...

These are the settings for POP3 access. However, when I do a 'sh xlate' the global address is incorrect. When the workstation sends smtp, a different global ip is used other than what I assigned statically. What gives??access-list permits tcp host <I...

Hello, We are experiencing a strange problem with one of our IDS units that is at a customer site and is being managed over a VPN tunnel. We have already replaced the unit and still the same problem. You can SSH to it just fine, issue simple commands...

Hi all. I am attempting to do something which I would assume is quite simple. I have a Pix 515 running version 6.3I want to place a publicly accessible DNS server behind the Pix. I created a static NAT entry for the DNS server (which is on a private ...

I have installed a pix 515 running 6.3. There is a an EDI service group (remote) that requires https (443) to be enabled on the firewall for the application connectivity to our local server.Is this port already openned? If not how do I set it up?