Network Security

Is it possible to configure failover pix firewalls with dual switches.For example there are two border routers. Those two routers are connected to two different switches. These switches are interconnected. The primary firewall is attached to one swit...

Can ASDM manage SSM from remote site? For example,when I try to access to the SSM with ASDM (Configuration > Features > IPS) through the outside int of ASA, the reply is "IP address of the management port is unreachable".Management port ip address: ...

is there any way to see the false positive directly in a CSIDS 4235through telnet

hi,I have 2 pix's, one is running version 6.3(4) and secound 7.0(1). how can i load the running or startup configuration from pix 6.3 to pix 7.0I wont to upgrade my pix 6.3 to 7.0 but before this i would like to have a backuped pix.

HII´m searching a way to bring my samba clients form one subnet outside the pixto my samba server inside the pix.the clients aren´t able to reach the pix because the broadcasts won´t be forwardedOnce the client is in the samba domain I think the prob...

I had a old pix 520 and I want some features:1.- How many packets per second support..?2.- How many bandwith delivery and support..?3.- How many simoulteanus connections support..?Many thanks

On Pix 515 I open port 135/TCP , 389/TCP/UDP, 636/TCP, 53/TCP/UDP, 88/Tcp/Udp & 445/TCP. Now I can logon to domain but still no able to join computer to domain via Administrator id. I got message; Network path not found. If i assign IP to IP permissi...

I have an internal workstation that needs to be NATed to an address separate from the Internet global pool that needs to communicate over a site-to-site VPN tunnel but still use the Internet global pool when accessing the Internet. The tunnel is crea...

what are the day to day activities of an IDS admin.

Not really sure what the problem is, but guessing it could be bad firmware. It copies from tftp server just fine in boot helper mode, then asks for activation key and boots into the IOS the first time just fine, but on power cycle or reload, it give...

hello experts - perhaps you could shed some light on a question that has popped up. i have a customer with a PIX 501. his original license key allowed him 10 users with AES/3DES and he purchased an upgrade to 50 users (PIX-501-SW-10-50) - when he a...

Hi Will the NATing at the Firewall reset the QOS info in the IP header ? As per my understanding it should not. Could someone please confirm this as what is the default behaviour.ThanksAti

I'm using PIX 515E 6.3(4) with 6 FE ports. I'v configured outside, inside and DMZ interfaces. I'm using NAT exemption between Inside and DMZ interface and NAT static translation without changes of IPs. If I make one download from DMZ to Inside (ftp o...

This isn't the normal question about setting up two PIX firewalls in a failover to each other setup.What I would like to know is if the PIX 501 is capable of detecting if the internal server is not responding and, if not, then switching the NAT table...

Salam i want to upgrade 4240 from 4.1 to 5.0 when i am in romon mode and i give ip address to managment Interface of IDS and Tftp Server Address. After giving address i am not able to ping in romon mode to tftp server. i have use cross cable between...