Network Security

I have experienced something odd with our 3002 Hardware Clients behind a Cable Modem. It appears that if the Client does not have a current session established with the Concentrator, we are unable to communicate with the 'public' interface on the Cli...

hello,i have a pix 515 ur with 64mb ram and 16 mb flash. The pix ver 7 states that you require 128 mb to upgrade an unrestricted 515.my question is, if iam going to upgrade the pix to ver 7, will it revert to a restricted one?if it will, can i still ...

With signature update 176, I am getting alerted constantly on this sigID: 5526. The evironment has an AS400 that the clients access using IBM's Client Access software (uses Telnet). Yesterday, all of the passwords expired and the users were require...

Hi,I have PIX -ver. OS is 6.3(3)- with 3 interfaces: outside, inside and dmz.PIX will be used in intranet without address translation. IP Address must be visible from any interface to any interface, no address translation is required.For examlpe: Use...

Is it possible that icmp type 11 code 0 cause pix to drop traffic?After%PIX-3-313001: Denied ICMP type=11, code=0 from x.x.x.6 on interfaceinsideaccess list denies traffic it otherwise passes

Topology:7204 ----- Dsl/Atm/pppoe ---- C831+ C1601 ---- serial ------ C1601 ---+Eigrp is active on all routers.C831 obtains routes from C1601 remote serial line, but is unable to discover 7204 main site Eigrp routes.Are eigrp hello packets bl...

Can anyone tell me how to test or trigger a signature to determine if shun requests from the master blocking sensor (MBS) are actually resulting in shuns in the PIX? Can this same procedure be applied to FWSMs?

I was under the impression that I should be able to access the failover firewall when it is in standby mode. Currently, I am unable to ping any interface, access the firewall via the PDM or SSH. Conversly, while consoled into the standby firewall I ...

Hi all,I upgraded a 4215 from IDS to IPS 5.03 with Sig 181 and the BIOS update. Now I am unable to communicate through the sensor. I can ping the sensor only from int FA1(which I presume is actually FA0/1 in the config) Here is my config:service an...

Hi Does anyone know if there is an impact to performance on PIX hardware when using pix code 7.x I am particularly interesed in the affect it may have on VoIP. We have a number of PIX 515's and 515E using VPNs between sitesregardscolin

Hi,I have a UR failover bundle of PIX 525 and would like to procure 5 Security Contexts do I need to purchase a license for each PIX in the failover pair or just one. The product no for the context license is - PIX-SW-SC-5Thanks,Anil

Hiya,I'm thinking of installing another NIC on our Cisco PIX 525. Currently there are 3 Fast E interfaces on it, i.e. e0 e1 e2 . I plan to add another one for a second DMZ. I've tried using a 3COM 10/100 NIC but that doesn't seem to work - PIX does n...

Folks, Looking at the cisco software navigator and it tells me that a 3660 router also supports IPS. Does that mean that i will be able to load the latest Policy manager or SDM and manage the IPS functionility? Aso download signatures sepratel...

Is there a way to import current firewall settings from a 3Comm firewall into the pix515?

We have set a Cisco ADSL router up and a PIX firewall. I have followed the Cisco article on configuring the firewall but no matter what I do, I can only see the outside addresses if I allow the Firewall to give me a DHCP address. I have tried NAT and...