Network Security

Hi,Is there anyone out there that is using this fixup protocol pptp 1723 on the pix firewall??We are using it and it works well but only for a day or two and then stops. Reload the firewall or failover to the standby unit and then starts working agai...

Folks, I am trying to convince my boss to buy the 6500 blade IDS rather than regular IDS from cisco. Any good points to back my point???their is a huge price difference, does anyone know why?Thanks

Hi,Recently, I replaced my self-signed cert on the MC due to its expiry. Subsequently, all sensors were updated with this latest copy of the self-signed cert. However, each time I update the sensor signature, I got an error msg "TLS Trusted Host Cert...

When I install signature 171 to IDSM2's using VMS 2.3 I get: An error occurred while running the update script on the sensor named IDS-C1-B. Detail = An error occurred at the sensor during the update, sensor message = idsPackageMgr: digital signature...

Hello,I must change a 2610 router (using to interconnect VLAN) by a PIX Firewall 525.Then the technical support can better manage VLAN with the PIX PDM than CLI IOS.I cannot find a lot of information on how to configure PIX ver 6.3 and VLAN.But i hav...

All -->My goal? To redirect web traffic directed to the default 'www' port, to port 8080 on the web server in the DMZ.Below are the relevant command sets...static (DMZ,outside) tcp xx.xxx.xx.155 www 172.16.128.8 8080 netmask 255.255.255.255 0 0access...

We just upgraded a 4235 sensor to IPS 5.0. I can only access it via https on one machine. On every other machine I go to I have the same problem. I open up a browser and type in the URL. I get prompted a couple of times about a certificate and I acce...

Hi, I have a strange problem since few week. We have started our Webvpn service. I have configured two groups in VPN called students and staff. Same groups I have configured in ACS 3.2 with the IETF attributes No 25 is set OU=groupname;. Both of our ...

Hicant figure it out what I´m doing wrong ....Cant get the inside net to go out on the internet please check myconfig.it works if I add this to the config."access-list outside_access_in permit ip any any"but isnt that dangerus ?what do I need to do t...

I am having troubles in getting passive ftp to work through my pix. I have no troubles with normal ftp but the second I try to use passive ftp the connection never gets established. What happens if I just use the "fixup protocol ftp" command instead ...

Scenario: Local lan 10.1.1.0 with subnets 10.1.2.0 and 10.1.3.0 (those two are voip system). Also, internal router (2511) for 10.2.4.0 (remote office runs our apps and we run theirs). But we get our web access from our default gateway: the pix 501.I ...

Can rip be used on a pix 501? I was told via a cisco tac engineer that pix 501 cannot route.

Hi We install a microsoft ISA server in the dmz for exchange server security. where can find document about ISA in the dmz setup?Thanksben

I have a group defined for internal Hosts:object-group network Dep_RH_Hosts network-object host 10.195.190.2 network-object host 10.195.190.5 network-object host 10.195.190.8... (plus 32 hosts)I have too a group for external IP addresses:object-group...