Network Security

EXISTING SETUP: My customer is on a flat network on a certain OSPF Area. ABR connects the area to the OSPF AS. THE PROBLEM/QUESTION: Iam now inserting the PIX 515E UR between my customers network and the ABR. Do I need to implement OSPF on my PIX eve...

i have PIX 515 firewall, i have the following problem:consider the following:inside interface: 1.1.1.1/24DMZ interface: 2.2.2.1/24outside interface: 3.3.3.1/24Access-list 10 applied at the inside interface.access-list 6 applied at the DMZ interface.A...

Hello,I have just bought a cisco 877W. For some reason SDM says that the IOS is not supporting QoS and IPS. I have upgrade the IOS to the latest 12.4 (advsecurity), but still no supoort for Qos and IPS. According the information from Cisco it should ...

Does anyone know when NAC phase 2 and CSA 4.5 will be released?

Hoping that you maybe able to help ?.I have 2 x PIX (515) Firewalls in failover configuration, I need to connect an ethernet switch (C3560) split into 4 seperate Vlans to a single interface on each of the firewalls.Basically I have 4 3rd Party vendor...

I already have a site to site vpn set up with a branch office, and all of the traffic that is defined in the ACL traverses the tunnel. My question has to do with Internet related traffic. Is there a way that I can define all internet traffic to go th...

Hi, We recently had to re-install VMS due to a corrupt database. We actually fdisked the hard drive reinstalled Ios with the appropriate patches and reinstalled VMS. Everything has been smooth until I try to upgrade the signatures on my sensors. All ...

We want to enable some customers that are NATed off te inside 10.0.0.0 network to be able to ping and traceroute to destinations outside the Pix. They can traverse the Pix for all other traffic, such as web and email. Customers on the public networs,...

We were testing ips which seemed to break comcast and cox cable users from loading our website. A user from any other isp was not effected. Anyone have an idea?I had roughly 150 signatures enabled using the generic attack-drop.sdf on a 3725 with 256 ...

Newbie here so go easy on me.. I am pulling my hair out on this.What is the proper way to create an event variable for addresses outside my networks? Ie: internet addressesThanksDan

I have a test web server inside our DMZ that accesses a sql server on the inside network. The problem is when I create the access rule access-list DMZ_inf_in permit tcp host 172.16.10.250 eq 1433 host 10.10.2.28 eq 1433 and create the static routesta...

Has anyone configured a Cisco Pix 515e over GPRS (General Packet Radio Service over a mobile phone network) ?Reason I ask is that I tried and as the mobile network provider perform PAT at their gateway (for reserved local addresses to single public I...

One of our most common hosted games suffer greatly at the moment, as we get hit by a mirc script that forces the servers to crash. We have tried to limit the buffer size, i e patching it - but it simply doesnt work against this malware.We are now loo...

Hello all,Does PIX "fixup protocol" command work in both directions? By directions, I mean, from inside to outside and from outside to inside. I know it works for inside to outside, but not sure if it works for outside to inside traffic as well.To be...