Network Security

HiI've got a pix501 running 6.3(3) code with the command fixup protocol pptp 1723. I've got a server (windows 2000) also on the inside which is my pptp client and an instagate firewall on the internet which is my pptp server. For some reason, the p...

I currently have a 2600 as my headend for a few GRE tunnels to 1710s. I would like to add a PIX501 to the mix. I know that you can't run GRE over the pix, but wanted to know if there are an considerations before I try to configure it. Also, are th...

Hello all,I am new to PIX and I would like to take the advantage of FO bundle (I learned it is the cheapest among all bundles). I am aware that I cant use Fo bundle as a standalone system (I read that it reboots once every 24 hours if I use it as a s...

Are there any Cisco documented limits to PIX access-list entries or to the overall config size? I am particularly interested in PIX 6.3(3).

Hello,I'm trying to setup a PIX 515E in the lab for learning .I've configured ether0 with IP address 212.100.211.1/24 and ether1 with 192.168.10.1 /24 . Ether0 Interface of Pix is connected with a PC having IP address of 212.100.211.2 /24 using cross...

I have several IOS routers that are successfully establishing IPSec tunnels to my PIX. However there is one particular router that will not connect. It is no different than all the rest, same IOS, same crypto config but it just doesn't work. I hav...

Does anyone see anything wrong with this config. ? I just recently had to switch ISP and got only one IP from my new one. Since then, internet access has been sporadic at best and I cant seem to figure it out. Simple config for the most part other th...

I have a PIX 535 that already has 3 gig/fiber interfaces + 2-10/100 NICS in it, and 5 open slots. Question is, is there a limit to how many more Gig/fiber interfaces I can put in it?I'm surfing CCO for the specs and if there are limits to how many in...

I have a faily basic config here, and I can't get it to work :( I have a couple Citrix servers, web, and a mail server behind my pix. They all have static ip's, so, I want to nat them at the firewall to re-direct to my internal servers. Here is my ...

hello,I need help to solve this situation,I'have got a lan with two routers connected to internet.I'm trying to protect this lan using only a 506e pix.my lan is connected to the inside interface, while my routers are connected to the outside interfac...

I am considering using my ACS (TACACS) to authenticate administration users on a new VPN 3000 concentrator. My concern is that there does not appear to be a fallback authentication method such as in the routers. Does anyone know if there is indeed a ...

I started using 802.1q and VLAN, and need 12 different levels, but, The command reference for 6.3 says only 6 are available:Enter 0 for the outside network or 100 for the inside network. Perimeter interfaces can use any number between 1 and 99. By de...

Dear Friends, Around 300 dialup clients are connecting to my PIX from various public ip assigned internet pc's,whereas they will be assigned an ip from the pool of my pix to access my LAN.Now we are moving to all the clients to cisco isdn routers wit...

Hi everybody,Could anybody help me?I'm at customer'e facilities and we want to upgrade PIX 525 sw. Current verion is 6.0(1).Are we allowed to upgrade to 6.2(3) ? And if yes, what about license key, should we request a new one ?If we are not allowed t...