Network Security

Hi,I am new to PIX.Pls find the attached setup diagram and configuration.Customer using ADSL modem and Linksys router.ISP have given two IP address(200.a.b.c for mail.xyz.com) and 200.x.y.z public IP on PIX external interface for outgoing traffic.The...

I've installed the Hp Openview NNM on the DMZ of a PIX 515E in order to supervise my inside,DMZ and outside network. But, I did'nt manage to access to the inside network since I can't ping the inside machines from the DMZ. Of course, I can ping the i...

I have trouble with configuring idsm-2 inline mode(5.0).it seems that traffic doesn't go through idsm.I chechked it on command: sh interfac gi0/7(idsm mode)the 'pair Status=down'(below) shows that, i think.moreover, total packet received doesn't incr...

I´ve created a new vpngroup and assing it a range of ippool similar to the first one. My clients can login using the new vpngroup but they can´t see my LAN and I can't see themI don't know what's wrong????For every new vpngroup, should I have to crea...

I have a 1760 at a remote location and a concentrator 3000 at my main office. Is there a easy way to setup a vpn between these two devices?Thanks

When trying to retrieve IPLog traces or the trigger packets from the Security Monitor, I get the following error message:Packet Viewer - ERRORjava/awt/Component: method getHeight()| not foundUnable to initialize Packet Viewer.Of course, the trace doe...

I have searched EVERYWHERE for an answer on this but I can't find a thing. Our IDS worked fine for a few months but now all the alerts just say ALARM FEED INACTIVE (Cannot connect). I have rebooted both the sensor and the agent various times, check...

Just a short question: does anybody know how long will there be development of signatures for 4.x sensors ? Will they be for free or is there also subscription on the way ?THX

So, I'm looking at the NAT-control command in PIX 7 and thought of a hypothetical situation:1) Let's say I disable NAT control with the 'no nat-control' command. I have public IPs in my DMZ, so I don't want to have to mess with a static statement to ...

Hi All,The command 'copy flash: tftp' is not seen in ver 6.3(3) but is available in 7.0(1)Version 6.3(3)PIX# copy ?Usage: copy capture:<capture-name> tftp://<location>/<pathname> [pcap] copy http[s]://[<user>:<password>@]<location>[:<port>]/...

HiI am using exchange 2003 server in my network and it is connected to inside interface of the pixfirewall which goes to leased line. In the firewall I have given a static nat for the exchange server also I have 16 global IPs nat to internal network...

Hi ,Who can tell me how to config ipsec over GRE tunnel when remote side useing dynamic ip !Thanks!

how do you enable a permission for a passive mode FTP connection, is it just by using the fixup protocol ftp 21 or is there other commands that need to be implemented also?Your response would be much appreciatedThank you

None of my static nat work on the new version. I keep receiving deny src outside (address) to local address by access-group outside_access_in

I had to recover a sensor to s47. Before it went down the sensor was at s159 in the VMS MC. How can I get the sensor back up to s159 without losing all of my settings/filter/custom strings, etc?????????