Example global (outside) 1 114.33.100.190 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 global (outside) 2 116.62.42.65 nat (inside) 2 0.0.0.0 0.0.0.0 0 0 Will this work? I have two T1's from separate ISP's. I'd like to load balance outbound per destination at ...
At the moment I am configuring a PIX 501 FW. Behind the FW I got a videoconferencing server serving clinets on Internet.I have set up at static nat to the server from the public IP and opened all the needed ports. But still I cant contact the applica...
Hello I need to allow a server on a DMZ to access an other server on the inside network by NFS.What's the easiest way to do that ?I wrote something like that but I don't know if it's the best thing to do:access-list dmz-test_access_in permit udp host...
Dear sirs. I have several 4235 sensors and SMARTnet 8x5xNBD contracts on each of them.Have I upgrade their software to IPS v5.0 within this contracts or I should get licenses for the IPS?
HiDon't know if this has been an issue before.My 3005 validates users against the AD database. Problem is, that when they try connecting to WebVPN service they are denied access when they are member of more than 10 groups in the AD.Anyone have an exp...
Hello, It seems after S159 our IDS's started refusing any config updates/remote logins and returning "cannot communicate with system processes" shortly after login and then disconnecting the session. I see there are some patches available on TAC. I c...
The following signatures are mentioned in the release notes but do not show up in VMS:4703.0 MSSQL Resolution Service Stack Overflow STRING.TCP Info True 4704.0 MSSQL Resolution Service Stack Overflow STRING.TCP Info True
I just upgraded to IDSMC 2.0 today. When I try to do signatures updates to a 4.1 sensor, the job fails with this error below. I already added the VMS server as a trusted TLS host on the sensor. Rebooted.Any ideas? Do I need to add the sensors cert...
Hi all,In previous version of PIX IOS, yu could use clear xlate in cases where you wanted to force a session to close. Now with PIX 7.0, nat is no longer needed. Though what is the alternative to clear active connections (all or specific) shown by "s...
I am trying to change the radius server using PDM and I can not do it it give me an error sgtating that I need to change the server on the ACL.PLease tell me whereelse do I have to go and remove the old radius server and add a new radius server.Thank...
I have several questions in regards to ARP.Does clearing PIX ARP table break any current communications between interfaces (ex. LAN to MAN mainframe connection)? How would the clear ARP affect new communications attempting to be initiated between in...
Hello all, I have a PIX 515 with 5 interfaces. I need to add a totally seperate company to an interface. I want to make it so that they can't access our internal network and dmz (with the exception of the rules allowed by the dmz). At the same time...
PIX Firewall earlier than version 6.3(2) block dns query responses if query comes from Server 2003 and the external DNS server supports EDNSO. Microsoft's workaround of disabling DNS-Probes did not solve the problem. Short of updating the IOS is th...
