Network Security

hi,Pls find the attached files.New to PIx firewal.128.1.1.248 is not given by ISP. do let me know whether the following can be deleted: 1)access-list inside_outbound_nat0_acl permit ip any 128.1.1.248 255.255.255.248 2)nat (inside) 0 access-list insi...

I have strange problem, I don’t understand where the problem is?I have one website on MS 2000 Advance server with IIS 5.0, one CA server built-in into MS 2000 Advance server on another computer, my website is secured certificate issued by this CA cer...

how do you enable a permission for a passive mode FTP connection, is it just by using the fixup protocol ftp 21 or is there other commands that need to be implemented also? Your response would be much appreciated Thank you

Hi,I'm looking into sort of a rock/hardplace issue with VPN clients.(Various concentrators) We need to use some split tunneling to allow remote clients to access local printers, but we want to enforce the "Use Integrated Firewall Policy". The probem ...

Greetings,I would like to block any ICMP requests from the outside; returning host unreachable, etc. Would the syntax be something like:icmp deny host 1.2.3.4.5 echo-reply outsideI would also like to permit ICMP from inside to outside.What would the ...

Hi , Windows2000server(inside):PIX: client(outside) I am trying to login to active directory server from a windows client.I have opened all the necessary ports and mapped a global ip address to the inside server.The server is also acting as a dns.Now...

Hi All,Is it possible to have static translations to two diferent ip address ranges on the external interface of PIX?We want to configure pix for BGP multihoming scanario, We have two internet connections and one pix on each. Both PIXs need to accept...

These are the settings for POP3 access. However, when I do a 'sh xlate' the global address is incorrect. When the workstation sends smtp, a different global ip is used other than what I assigned statically. What gives??access-list permits tcp host <I...

Hello, We are experiencing a strange problem with one of our IDS units that is at a customer site and is being managed over a VPN tunnel. We have already replaced the unit and still the same problem. You can SSH to it just fine, issue simple commands...

Hi all. I am attempting to do something which I would assume is quite simple. I have a Pix 515 running version 6.3I want to place a publicly accessible DNS server behind the Pix. I created a static NAT entry for the DNS server (which is on a private ...

I have installed a pix 515 running 6.3. There is a an EDI service group (remote) that requires https (443) to be enabled on the firewall for the application connectivity to our local server.Is this port already openned? If not how do I set it up?

Hello everyoneI have a strange message with my just-upgraded to 7.01 pix 515.The pix lunch flashfs then i got thoses lines :Need to burn loader....Erasing sector 0...[OK]Burning sector 0...[OK]Erasing sector 64...[OK]Burning sector 64...[OK]At each b...

Looking for tool like virus/worm simulator to verfiy/test working of different Signatures specially related to worm/virus

Dear all,I want to monitor viruse alerts using nids. any signatures specific on this. or can i monitor these things using Pix log messagesThanks in advanceRegardsNataraj

dear all,i am able to telnet to my nids , but its not accepting the password.. any links r trobuleshooting ideas Thanks in advancenataraj