Network Security

Hi,I am trying to deploy IPS 4240 with Software version 4.1. My query is, will this version support inline prevention? If yes, what are the deployment & sensor interface configuration considerations. I believe the new 5.0 version supports this featur...

Howdy,Can I have more than one outside interface on a PIX?I have two /27 on two totally different subnets. I'd like to be able to route each of these subnets via different interfaces on the PIX.So for example, four interfaces (two public, two private...

Does anyone know of an ISP, big or small, that offers IP QoS features on a customer port?

We have the following setup:Pix 500 series firewall running OS 5.3. We have 1 to 1 nat set up. Behind this firewall we have dlink lingo voip gateway.The dlink lingo voip gateway has an external address of 192.168.5.5. We have a one to one nat set up ...

With plain old Ciscoworks LMS is there anything useful that can be done with a PIX or a VPN concentrator as there is no write community string. Can you do anything aside from viewing the box?

I am firewall challenged and am hopefull someone can help with my issue.I have a PIX 501 firewall configured and am trying to send email through SMTP from an application sitting on a server behind my firewall. I have opened port 25 for TCP traffic (...

I am trying to help a friend who bought a refurbished PIX 520 that he wants to deploy at a clients location. Question is on the license, small print at the refurbishers site said that Cisco License does not transfer ? Does it? Can he deploy it? It o...

Hi,I received the .lic file from Cisco and copied it to the local drive, but when I try to import, there is an error message.Can I copy the license file more than ones, from directory to an other? Any advice?Thanks

Anyone have experience or documentation you can point me to about really large access-list on a PIX 525 and it's impact on performance. Due to network design 'issues' the proposed list may be over 1500+ entries. Even with Turbo-ACL and Object Group...

Hi all ,I have the problem about PIX 515e and my running config as below:access-list inside deny tcp host 172.16.1.29 any eq domain access-list inside deny udp host 172.16.1.29 any eq domain access-list inside permit tcp 172.16.1.0 255.255.255.224 an...

I have 2 PIX 501's setup in seperate locations, I have them both setup for VPN via PPTP. I can connect to both of them fine unless Im @ one of the two locations behind one of the Pix. I have tried using the coduits but I am not having any luck. Is th...

Hi all,i would like to create a custom signature on my CSA MC to prevent any kind of programs ( .exe files ) installation on user's pc.So, how could prevent it?? Thanks in advanceMatt

I have a pix 501 at a remote site that connects to a 3000 concentrator at my main site which is tied into active directory. Lan to Lan Over IPSEC using preshared key.I have a successful tunnel connection. I am able to ping clients on either but i am...

In a PIX with restricted license,if a connection is made from inside(internal hosts) to DMZ , will this also be considered towards the number of connections. Also will the connections from outside hosts to inside network be considered as a new connec...