Network Security

Hi Will the NATing at the Firewall reset the QOS info in the IP header ? As per my understanding it should not. Could someone please confirm this as what is the default behaviour.ThanksAti

I'm using PIX 515E 6.3(4) with 6 FE ports. I'v configured outside, inside and DMZ interfaces. I'm using NAT exemption between Inside and DMZ interface and NAT static translation without changes of IPs. If I make one download from DMZ to Inside (ftp o...

This isn't the normal question about setting up two PIX firewalls in a failover to each other setup.What I would like to know is if the PIX 501 is capable of detecting if the internal server is not responding and, if not, then switching the NAT table...

Salam i want to upgrade 4240 from 4.1 to 5.0 when i am in romon mode and i give ip address to managment Interface of IDS and Tftp Server Address. After giving address i am not able to ping in romon mode to tftp server. i have use cross cable between ...

I would like an explanation of the upgrade process from a Cisco 4215 IDS sensor to the IPS 5.0 capabilities. Does it require extra hardware?

I am trying to upgrade a pix to 6.3(4) and was unsure of how to copy the image from a remote site to the firewall. I can access the firewall but only from the remote site core switch. someone mentioned copying the image via tftp through the core swit...

Hi! Anybody here know's how to block yahoo messanger on pix firewall 506e. I try to do port blocking but it did not work. those ports are 5000, 5050 etc. any help is greately appreciated.Thanks,Jeric

Hi!!Now I'm just testing the PIX v7.0.but once I type the "mode multiple" andPIX is reloaded,the configurations about ip and Firewall policy are all refused.Is any lisence required for the "Security Context" ?Is some action needed to activate it ??Do...

In the ISA server network environment, where can we place the pix whether infront of ISA or Behind the ISA server.Thanksswamy

I got a PIX 506e. With LAN IP subnet of 10.2.1.105. Default route to internet. All my PC point it as a default gateway. Now, I have another router with IP 10.2.1.1 which connected to remote network of 192.1.1.0. I added a route inside 192.1.1.0 255.2...

The intent is to only see this alert when the source is my IP space. Is it possible to create 2 seperate event filters for this sig? I'd like one sig to filter events when my IP space when it is the destination and the other would allow alerts when m...

i can't install asdm to flash. i see that there is no enough free space: sh flash Directory of flash: 5 -rw- 0 00:02:44 Jan 01 1993 image_old.bin 7 -rw- 5124096 00:04:32 Jan 01 1993 image 16 -rw- 14263 00:01:07 Jan 01 1993 downgrade.cfg 19 -rw- 51036...

Hi All,Take a look at the sh ver below from a PIX515, specifically the max interfaces:Cisco PIX Firewall Version 6.2(2)Compiled on Fri 07-Jun-02 17:49 by morlee(host name removed) up 52 days 4 hoursHardware: PIX-515, 64 MB RAM, CPU Pentium 200 MHzFla...

I recently read the following article http://news.zdnet.co.uk/internet/0,39020369,39208852,00.htmI would like to find out if there are any currently enabled signatures to capture this vulnerability yet or are they on there way: Microsoft Color Manag...

Hi, it is audit season again, and was just asked the following questions regarding the IDS sensor.Min password length?is there a lockout timer?number of password guesses?can it be integrated with tacacs/radius?Will it kick you off after a certain num...