Network Security

Using the Cisco VPN Client to build an IPSEC tunnel to a Cisco 3620 (IOS 12.3) and then a pptp tunnel through the IPSEC tunnel works perfectly. We are currently migrating from the 3620 to a 3015 concentrator. The client builds the IPSEC tunnel and al...

HiIs it possible to do some kind of QoS in the pix to prioritize traffic going into Lan2Lan-tunnels over other outgoing traffic to internet?Regards Jimmy

SH VERCisco PIX Firewall Version 6.3(3)Cisco PIX Device Manager Version 2.0(2)Compiled on Wed 13-Aug-03 13:55 by morleefire up 12 hours 49 minsHardware: PIX-501, 16 MB RAM, CPU Am5x86 133 MHzFlash E28F640J3 @ 0x3000000, 8MBBIOS Flash E28F640J3 @ 0xff...

Hi There,I have a PIX515 with an outside interface with address 10.6.10.140 - can somebody tell me what commands I need to enter on the PIX to be able to telnet to its outside interface from the LAN connected to that interface?Many thanks,Dan

Need to validate that if this Microsoft Article is applicable for Cisco PIX Firewall's aswells:http://support.microsoft.com/kb/899148Need documented proof with explaination in either case.Cheers...Prashant Chauhan.

Recently I read some document regarding the Microsoft ISA Server 2004. It claims it will do a better job than the traditional firwall.Could anybody share some opinion and comments on the pro and cons on comparison of MS ISA Server 2004 with the Cisco...

I wan to update my brnd new installed IDSMC2.1 with IDS-K9-sp-4.1-5-S189.zip file, but the update process doesn't start. The job is just waiting in the Pendig Sig Jobs List.Any idea?Thnx

I have recently purchased a second hand 501 running 6.2 pdm version 2.2 and was wondering how I can get the bin flash file for 6.3 pdm version 3.0.Can anyone help

Hi, since the pix upgrade to 7.0.2, on the syslog messages I can see normal new session packets but also the returning packets, i.e. IP source port x to IP dest port 80 and the returning packet IP dest port 80 to IP source port x.could you help me ?t...

My boss wants an MOTD banner on our PIX-515Es running version 6.3(3). I have put the banner in and it shows up when I do "show banner". The banner does not appear when you log on or go to "priv exec" mode. It is only displayed when you logoff. I am f...

We are currently running a cisco 3000 concentrator with multiple roaming clients. Our current settings prevent these clients from checking their email or browsing the internet while connected to the vpn. This is a set in stone security policy. Unfort...

I have read that I can deploy an a DMZ on Pix 506.Is it true?Don't I need three ethernet interfaces?I need to connect Web server on DMZ.Does somebody advice on a document about it ?Best regardsLorenzo

I would like to use the PIX 501 firewall for the following purposes, but not so sure if it can handle them: 1) support 3 interfaces: inside, outside, and a DMZ? 2) Remotely configure/maintain the firewall using command-line interface (CLI) via VPN? 3...

Hello. I have a Cisco 1721 router with Cisco IOS - c1700-advsecurityk9-mz.123-7.T2.bin. Could you please help me start with the configuration of the router so that it could prevent DOS attacks. If you have an example configuration, I think it will he...

I am trying to set up QoS on a Cisco 831 router. I have two VPN tunnels (ipsec) on the router. It appears the Policy-Map command is not supported on my router. My IOS version is 12.3(2)XC2 using the image file c831-k9o3y6-mz.123-2.XC2.bin. Any sugges...