Network Security

Hi Everyone,I am trying to allow internet access to the users on the inside interface on my pix. To do so I have done a couple of things:1) Configured a global statement with pool range2) Configured the nat statement for all users to nat out using th...

Could anyone tell me please how to copy a config file from tftp to startup-config on a pix 501.I know you can do a configure net but I don't really want a merge. Ideally I want to be able to edit my files in Wordpad then just upload to the pix and do...

Is there any way to change the action triggered by the signature based upon the network/host source/destination address in all kinds of engines? In Atomic engine it is possible - for example triggering different levels of alarms, based upon the victi...

Does anybody know if with Microsoft Internet Authentication Service (IAS - radius service) it's possible to use download the access-list to the PIX firewall (per-user access-list) and how i can configure the IAS for this feature. Thanks in advance

Hi,any news about the new version of PIX OS software (maybe the version 7.x) (and which features) ?Thanks in advance for the info.

Good evening are few days that i see in the log file of my Pix firewall some strange record, now explain the threath.In one DMZ have applied an ACL that said:access-list acl_dmz-col permit tcp any any eq wwwand an access group that said:access-group ...

I used PAT to deal with all my inside addresses.And the PAT global IP is different from the pix outside interface IP.I enabled ICMP to go through my pix(OS4.4).When I tried to ping PAT global IP from outside network,I failed .I don't know why.Is it r...

hi,Does CSA 4.0 is supported on solaris 9.0as it is written that it is supported on 8.0thanks

We have a VPN Concentrator 3005 and PIX 525 and Radius server (Funk Software). Last weekend, we had to power off all the systems due to electrical maintenance in the building. When we powered on everything on Monday, the users can authenticate thro...

Does anyone out there using 4250XL on: 1. span port of switch configured as 10/100/1000 fullduplex? 2. Toplayer taps?We are unable to get the sniffing port going as it does not recognize the tap nor the span port. Upon speaking with Cisco, we wer...

I'm looking for clear guidelines, as the Cisco command ref, config guides etc do not cover all the combination of options for established from low to high and high to low security interface, NAT (inside/outside), Indentity NAT, Outside keep same IP a...

Is there a signature to capture edonkey etc. via the proxy server? Id 11018 seams to only trap the connection from the proxy to the internet address. I would like to be able to be able to identify the internal device connection to the proxy. I have m...

Hello. I have a client who is looking for a way to secure his network users and servers. His requirements are a single sign on for his network (mostly active directory / NT Domain), client and server protection and management of cisco devices. I will...