Network Security

We are currently running a cisco 3000 concentrator with multiple roaming clients. Our current settings prevent these clients from checking their email or browsing the internet while connected to the vpn. This is a set in stone security policy. Unfort...

I have read that I can deploy an a DMZ on Pix 506.Is it true?Don't I need three ethernet interfaces?I need to connect Web server on DMZ.Does somebody advice on a document about it ?Best regardsLorenzo

I would like to use the PIX 501 firewall for the following purposes, but not so sure if it can handle them: 1) support 3 interfaces: inside, outside, and a DMZ? 2) Remotely configure/maintain the firewall using command-line interface (CLI) via VPN? 3...

Hello. I have a Cisco 1721 router with Cisco IOS - c1700-advsecurityk9-mz.123-7.T2.bin. Could you please help me start with the configuration of the router so that it could prevent DOS attacks. If you have an example configuration, I think it will he...

I am trying to set up QoS on a Cisco 831 router. I have two VPN tunnels (ipsec) on the router. It appears the Policy-Map command is not supported on my router. My IOS version is 12.3(2)XC2 using the image file c831-k9o3y6-mz.123-2.XC2.bin. Any su...

We are using a Pix 515 to Netscreen at our hosting company firewall over a VPN. Everthing works OK except communication from behind the PIX to the hosting network on TCP port 1026, all other ports communicate OK to the same server. Communications wor...

Hi,Is there an easier way to copy the old config from the pix to the new one without having to do a copy and paste to it?The reason is, that when i do a copy and paste i receive errors or imcomplete command messages. Maybe because i need to apply the...

We wish to have 2 default routes. One points to a gateway on the outside interface network. The other points to a gateway on another interface, but has a higher metric. If the first default route gateway is not accessible, we want the traffic to g...

Hi all !I've the case, ASA connects to 02 routers via ethernet. 02 Routers connect to Internet follow 02 Leased line. I want to configure on ASA to route base on "service", "mail" go out to Internet via "Internet Line 1" (Router1) and "web" go out to...

I have an IDS-4250 that is monitoring 2 PIX firewall.If an attack is generated the IDS sends a shun command to both PIX.Is it posible to block only one of the PIX.If i use a second monitoring interface to manage the second pix would this help not to ...

Hello We use LMS 2.5 with latest patches on a Solaris 9 box. We enabled the ACS AAA Mode.In the DCR we are missing some devices. All these devices are listet under "Reports - Devices that are not configured in ACS". But some of them which are listet...

We had a failover last weekend and I can't figure out why it didn't go as it should have. The logs show this sequence of events:103005 (Secondary) Other firewall reporting failure.105009 (Secondary) Testing on interface 3 Passed105003 (Secondary) Mon...

Hey everybody,Icouldnt figure out something about IDSM2. It says int7 and int 8 are sensing ports. eth0 is control management port. config examples are all the same intrusion-detection module x data-port 1.On IDSM config guide it says dataport 1 is a...

I am having trouble using host names for Remote Desktop access over VPN tunnels using PIX 501, 506, and 515 firewalls. I have a WINS server loaded at each office, and I can use host names with the VPN client outside the networks, but not between loca...