Network Security

I have a requirement of providing Internet access to INSIDE users based on groups using a PIX firewall with multiple Zones connecting to 3 Internet uplinks ( different modes like 1 Leased Line, 1 ADSL & 1 ISDN ) as shown in the enclosed slide. Can so...

Which interface is interface 0? Ethernet0? This is my outside interface. Why would my outside interface being communicating with the other pix, when I have a dedicated failover interface with x-over cable?Jan 12 02:06:26 lab-pix515e-pix1.com Jan 12...

Hi All,Have a main office (192.168.x.x, Cisco 1721, IOS 12.3) and a branch office (10.250.1.x, Linksys AG041), both connected to the web via ADSL.Have setup a tunnel between the Cisco 1721 and the Linksys AG041 (I am based in UK if model is unfamilia...

I have some material coming, but I would like just to see if this works. I have a Cisco 2621 router with a VPN module. I have set if up as best as I currently can, but still, I cant make a connection. What am I missing?Config:aaa new-modelaaa authori...

What am I doing wrong?I am connected directly to the cisco 1700 and can access the www but when I type https://10.10.10.1 as directed inthe manual I get page cannot be displayed. HELP!!!

What is the purpose of running OSPF on PIX ,as PIX will not do any routing.I guess it will just allow PIX to learn routes from neighbors and routes will be useful for PIX itself.Am I correct ?

Hi all,I need an help to set the correct timeout on a Cisco PIX, in fact after a connection and disconnection between two videoconferencing devices, sometimes the TCP connection rest in idle and I cannot connect again. If I clear the xlate (clear the...

I was curious as to where other administrators have their IDS devices on their network. Do you have the span set up to monitor a trunk link off a main closet? The reason I'm asking is that I notice the memory utilization on our local device is cons...

I have 10 exiesting PIXs. I'm scared about Firewall MC. It wants to convert my NAT 0 acls to the below.Why can't it just work with what it imported? What change the ACL names, etc?NAT Conversionaccess-list acl_mdc_inside_access deny ip any any log ...

I would like to redirect my port 80 traffic from my inside interface to the dmz interface.I have a pix 515e and three interfaces - inside (private net), outside (pub net Internet) and dmz1 (which has a squid proxy)What I want is when a user makes a w...

Can regex be used in the Service Ports field when tuning signatures? If so, what is the negate expression. If I want to exclude port 53 from a sig would I put in "!53" or "?!53"?

Hey guys,I just need to make sure that I understand a couple of things correctly. The native VLAN (VLAN1) will not work with a PIX set up for VLAN support through logical interfaces, correct? Does this mean that I simply need to re-assign all of th...

I’m trying to configure the following I have a Pix525 with 3 physical interfaces. The DMZ interface is configured for VLANS. Only 2 vlans are used, native (matching up to VLAN1 on my switch) is used for my DMZ servers and VLAN 55 is used to connect t...

Hi everyone,I'm planning to put a PIX 525 between our Web Server and a Database server. Let's assume the Web Server has IP of 192.168.3.5 (netmask 255.255.255.0) and the DB server has IP of 192.168.2.6 (netmask 255.255.255.0). The port I'm going to...

CSA agent will be suspended/terminated abnormally by malicious code or loop-hole of the OS kernel like what happened to certain Antivirus software?Please comment, thanks.