Network Security

Command references state that N2H2 isn't supported for "filter https" and "filter ftp", only Websense. Our N2H2 contact says they support non-http filtering, what's the problem in the PIX? Anybody have an idea when/if this will be supported? I'm in K...

Scenario: a TCP connection is ALREADY established between an inside and outside host (3-way handshake completed). The Pix receives a packet for the inside host in this connection with TCP SYN set - what does the PIX do?I would think it discards it bu...

hi,i have IDS 4235 running ver 4.1 with 4FE-Card i want to upgrade it to act as ips what is the update file name i have to apply for that and where i can get itregards,ahmed

I am having an issue with getting Cisco NAC to see the correct Syamantec DAT date.When I configure "Symantec:AV:DAT-Date days-since-last-update 14" it is not recognized by Cisco NAC.Has anyone else had this issue?Also, I cannot get NAC to work when I...

Does anyone know when V7 will be available on 506E ?txsSerhat

I have a 501 device. I have configured a site 2 site tunnel. It worked for a while (2 days) and then stopped. The problem now is that I'm blocked in Phase 1. My pix send a packet ISAKMP to the other side, the second respond and my pix does nothing wh...

I have setup VPN client access to my PIX 515 running version 6.2 (1), now my problem is as follows:When I use a PSTN dial-up connection from my laptop and then run the VPN client, I can connect to my PIX – no problem and also can access the internal ...

Dear Pros,I instaled 2 pix 525 in failover config for the internal server farm VLAN. It is working and tested.Now I wants to add 2 ISA server in series to the pixs placing the ISA before the pix behind internet routers.The order of the devices are as...

I have setup VPN client access to my PIX 515 running version 6.2 (1), now my problem is as follows: When I use a PSTN dial-up connection from my laptop and then run the VPN client, I can connect to my PIX – no problem and also can access the internal...

I have a SMTP server on claster on inside interface of PIX and SMTP server in DMZ.I need connect claster server with server in DMZ.from my config...static (inside,dmz) 192.168.1.100 172.17.2.5 netmask 255.255.255.255static (inside,dmz) 192.168.1.101 ...

Can PIX support dynamic port opening for H.323 traffic? Traditional firewall open up all the high port for H.323 traffic.

We’re having a mail fault which I believe is directly related to a recently installed Cisco Pix 506. We now longer are able to receive e-mails larger than 600Kbps. The MTU has been tried at 1500, 1404, 576 & 256, timeouts and fragmentation size are s...

I have setup VPN client access to my PIX 515 running version 6.2 (1), now my problem is as follows:When I use a PSTN dial-up connection from my laptop and then run the VPN client, I can connect to my PIX – no problem and also can access the internal ...

What is the replacement of "debug packet" command on version 7.0?Thanks in advance.

Hi I am trying to solve an issue where an inactive session times out after an hour. I am assuming that the inactive session is timing out due to the fact that the "conn" timer on the FWSM defaults to one hour.I see in the documentation that you can s...