Network Security

Cisco PIX document states that - If the two units are more than six feet apart, you can use the same Ethernet state link as the failover link, but we recommend that you use a separate Ethernet link if available. http://www.cisco.com/univercd/cc/td/do...

Hi,It is recommended on following URL that crossover cable should not be used for PIX LAN based failovers. Does anybody know what is the rationale behind this recommendation and why a switched connection is recommended between Pri and Stby PIX firewa...

Can I create a VPN tunnel where the remote router is behind a gateway router that uses Port Address Translation? In other words, one public IP for the entire private network? We're using a Concentrator 3005 at our corporate location and an 831 at t...

At my new job, I am no longer in the role of supporting our Firewall/VPN (all done at Corporate). I've recently been told that they are replacing all of our PIX firewalls with 1721 Routers to handle our Firewall/VPN connections. My previous experie...

Hello all, I have a PIX 501, that currently is configured using the 192.168.21.x internal subnet. Because of various vpn issues and other problems not related with the PIX, I would like to change the internal range to 10.x.x.x. For some reason, I ...

I have a VPN3002 Hardware Client (172.16.1.x) that is accessing a VPN3005 Concentrator (192.168.x.x) in Network Extension Mode. On the VPN3005, I have a LAN-to-LAN connection to another VPN device. I can access addresses in all scenarios except for...

I am experiencing difficulty in allowing my VPN clients to browse network resources by IP and by NETBIOS names.My clients connect and authenticate fine. Any suggestions on what might be causing the problem?I do have VPDN entries that point to the pr...

hi,i want to know difference between restricted and unrestricted pix firwall.Arun Kachroo

Dear All ,iam getting lot of alerts on 9017 - Back Door Probe (TCP 5401) . i found in my vms server ( D:\Program Files\CSCOpx\CSAMC\cfg ) ssl-bundle file [BUNDLE_CONF]mc.server_cert_cn=itvmsmc.http_port=80mc.https_port=5401mc.alt_https_port=443is tht...

Have a question about routing with a PIX. I have 4 branches with all PIX 515E's. This is in full mesh VPN topology. My question is, can I add a failover route through another branch if one link fails? I'm curious if i'm going to have to enable OS...

I am looking for any third party software that may replace SecMon and IDS-MC. We have had so many issues with it that it is time to find a solution by looking for another vendor to manage Cisco's NID's. If anyone has had any luck please let me know.

Hey Everyone,I have a small setup and I'm trying to do a little learning here. What I want to do is block a group of interal hosts from accessing the internet, while allowing a couple of others to continue to do so. What I did was the following:1) Cr...

Hello all,I am trying to understand the relationship between number of active/idle connections and memory utilization in PIX firewall. The PIX under consideration is 520 running 6.2.2 software on it. How much memory PIX uses per active vs idle connec...