Network Security

Hi,I have PIX 515e with OS 6.3(4) and I have one outside and two inside networks.right now I have these settings (config excerpt):...nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 half security50...access-list i...

Does the IPS have to be connected back-to-back with a cross-over cable with the firewall in Inline-mode, since it looks like we are not assigning any IP addresses to the sensor interfaces??

Hello, I have problem with MTU via L2TP multihop. Has anyone information what is sequence of operation, when tunnel switching is provided ? (when packet is switched into second tunnel, is compared with MTU before or after L2TP encapsulation) ?Thanks ...

I've found that I need the correct licence/liecences to do failover. However, I can't find out how to check if we already have the correct licences and how to GET the upgraded licence if not.

I have configured bandwidth reservation in my routersMy probelm is I am not getting any hits on the access-lists Eventhough data traffic is there as per the access-list and in the show policy-map interface output not seeing any packet count.This is m...

Does Cisco have any recommendations on putting CTA on servers and using NAC?This is more in anticipation of NAC on switches. If you have good physical security over how servers connect to and disconnect from a switch, and you have good control over s...

Senario:Note: Squid proxy at DMZ of PIX (single legged).Inside LAN: 192.168.22.0 /24DMZ : 172.16.10.0 /24How to go ahead to configure PIX acl to forward all http, https, ftp traffic iniated from inside LAN to Internet?eg.access-list dmz_in permit tcp...

We have a number of 2821 routers that I have in VMS as IDS devices. When I try to upgrade the signatures with the IOS IPS zip file I get an error message that says the file is not recognized as a signature update. Are there any examples of how to upd...

Hi,We want to upgrade one of our pix to support version 7.0. In order to do so, we need to upgrade the mem to 128Mb (as this is an unrestricted). Unfortunatelly, the two mem slots are full (2x32mB). Did someone know what the PIX-515-MEM-128 contain? ...

I've got 7206 IP/FW/IDS 12.3(11)T3The very strange problem: 1) half of SMTP trafic does not flow from Internet to my inside SMTP server (public address) Though I turned all signatures off except HTTP block2) inside FTP clients can not get some files ...

Currently I have 10 inside host available. I need to add more and what is the command to execute activation-key? or do I need to buy this from Cisco?thxEric

Hi all,I have a PIX 515E that we recently upgraded to 128mb RAM and PIX 7.0. At the very top of our inbound access list, we have the following lines to enable people on our LAN to be able to traceroute to the internet:access-list outside_access_in li...

I have two 2811s in a tandem configuration. One is the border router with an atm aim, two VWIC-2MFT-T1 and 2 atm pvc's connected to the internet. The other 2811 is being used for voice services. The one being used for voice services can be accessed w...

hi guysI connected the eth1 interface to a hub and my laptop to the hubThe link led is flashing green on both interfacesI cannot ping the pix515E on 192.168.1.1 and do not have a valid IP adress on my laptop despite PIX being able to give DHCP adress...