Network Security

hi,i have a PIX 525 with 2 FE ports and 1 Gig Port. I wanted to use the GIG as the inside interface. Is it possible to swap the Inside from Fe to GIG and used the FE for DMZ?regds,T Singh

Hi, that's the Problem:When I try to connect MSN it's not possible.I saw that on the firewall:---305011: Built dynamic TCP translation from inside:inside-ip/1166 to outside:outside-ip/55586302013: Built outbound TCP connection 75493 for outside:65.54...

When I am configuring two firewalls in failover, do I have to use three IP adreses per interface pair or I can go only with one, real one? Problem is that behind my firewall I have routers and I used 30 bits IP subclass. And now I want to add failove...

Hi All,We have been using Cisco PIX's for more than 5 years now, and vpn tunnels have been part of many configurations through time. Now I finally got brave enough and upgraded a pix to PIX OS 7.0.2 from 6.3(5)It was a mess to change the configuratio...

I have taken on managing a CSA MC with version 4.0.3.739 + 4.5.0.565 agentsI cannot upgrade the 4.0.3.739 agents to 4.5 because of the mandatory Windows System Module preventing any action to the Agent Service Control. If I remove the mandatory WSM t...

Recently i join a new company where i find very unstructured network we have three cisco catalyst 2950 one Cisco 2620 router, three 3com 4420 manageable switches and seimens wireless lan (Gigaset SE505 cable/dsl router / bridges) and few un-manageabl...

We have a VPN 3005 concentrator that connects to our backbone switch. We have about 6 sites who have the following subnet:site A: 172.16.x.x site B: 172.17.x.x (etc)When a user is at home, hotel, or directly connected to the Internet and they connec...

I want to redirect all http/ftp traffic through proxy server from the PIX. The proxy is 10.133.1.49 and PIX is 10.133.6.10. The default gateway for the hosts on the network is 10.133.6.10. Is my logic sound?

We have deployed Pix 501's to small remote offices. Most receive dynamic IPs from their ISPs, they connect to our 3005 concentrator here in our home office. The Pixes are configured using Easy VPN, and are in network extension mode. Clients sitiing b...

Hi Everyone, My understanding of a general PIX config is to have the inside interface connected to your LAN and the outside interface connected to the "Internet". Now I have configured the NAT to translate my internat 192.168.x.x address to my routab...

Hello, we are trying to place partner networks on discrete vlans on one interface of our PIX (PIX version 7).An engineer has been in and configured the PIX (see attached - pix7config)from looking at it I have the following questions:* Does it make a ...

Good day!I'v read all the documentation, and still can't understand, is there support for L2TP over IPSec in PIX 7, or not? In Upgrade manual some commands are mentioned, like vpn-tunnel-protocol, which must support L2TP. But in the Release Notes L2T...

I have been tasked with designing a DR/BCP solution for our vms server. Does anyone know of resources for this. I would like to have a second VMS server at another site. Does cisco provide documents on how to do this? Currently, we are using only CSA...

Dear All,we are using vms 2.2 with ids mc 1.2.3 for monitoring ids alerts, now we want to upgrade ids mc to 2.0 ,i have few queries on this, if we upgrade vms 2.2 to 2.3 directly , does it all the components( ids mc, csa mc ) upgrdaded automatically...