Network Security

My configuration has different subnet masks at the global level, a /23 for the ethernet interface and 2 /24 masks for the nat pools. Is there anything wrong with this on the PIX?Also, I would like to set up an access-list for a subnet of the /23 addr...

I was wondering if it is possible to configure C&C and sniffing interface on one interface? How to do this ? I have IDS4215 version 4.1

Will 'sh conf' output of the 5.0 code list all enabled signatures or just those tuned ones?

Hi AllWe're looking into purchasing an IDS/IPS appliance, but am concerned about thruput and perf issues. We don't have the budget to stretch to the multiGigabit models to monitor multiple points on our gigabit backbone and network in addition to doi...

The title says it all.

The attached file is the config on a new PIX 501. The inbound translation works but there is no outbound access. The routing and ip scheme is identical to the firewall that it is to replace. Can you see the problem ?

I have tried in vain to set this firewall up right so that i can get on the internet but have so far failed. It is replacing an old Symantec Firewall which had the settings i thought i would need in. I have put the settings into this firewall but i a...

I have a PIX 501 in Denmark. A VPN concentrator in the UK and the US.I have a LAN IPSEC tunnel from the UK to Denmark and from the UK to the USA.From the UK I can connect to Denmark and to the USA, but I cannot connect from Denmark to the USA (via th...

Where can I download a evaluation copy of CSA

Hello all,I am trying to configure "manual blocking" on the IDS sensor to block some hosts and networks. PIX is able to shun the hosts but not the networks. The "show shun" command shows only the hosts that are shunned and does not show any "networks...

We have a vpn box at our business, installed over 3 yrs ago. It is working fine, except that some latops are not able to connect to the vpn box through the vpn software. Is there an upgrade of that software? Please help.

I'm trying to update my IDSM2 sensor version 4.1(4)S172 to IPS 5.0. I've already downloaded the appropriate file file 5.0(1)S149 major update. But when I enter the commands to upgrade the sensor version, it says:# upgrade ftp://<my ftp ip>/IPS-K9-maj...

I have just got a PIX 506E and i turned off the DHCP server for the inside address and assigned it an ip of 125.0.0.57 and a subnet mask of 255.255.0.0 so it can work on the network. However i might have typed the subnet mask in wrong as i can no lon...