Network Security

Looks like an IDS sensor will lost communication with PIX firewall(s) if primary will failover to secondary in the redundant pair (if SSH used as a transport method - public key will be diff for the same IP). Unfortunately I don't think there is an e...

I have a static vpn between a main site and a remote site configured on a PIX. When I connect in via a dynamic vpn from my laptop I am not able to route through the other VPN to the remote site. Is there a work around for this on the PIX? I assume th...

Hello,We have a VPN Concentrator 3005. We want to monitor the bandwidth of the Lan-to-Lan IPSec connection using MRTG. Can somebody help me in getting me the correct OID?TISSaswata

Does anyone know what will happen if there are no IP addresses available to assigned someone using the Cisco VPN client via dial-up? In other words, will the PIX still establish the VPN connection and assign an IP address eventhough on is not availab...

Hello ,In user tracking under Campus manager, I'm getting MAC addresses , hostnames and IP address of the station and Username column is empty. How to get usernames?. From Ciscoworks manual, it says that I have to run UTLite script ?. Where I can fin...

OK,This was working just fine till about a week ago.Their is a group A behind pix 506 "A". I can vpn in from just about anywhere.Except, Behind any other firewall.Group B, behind firewall pix 506 "B" can not see or connect to any resources in group "...

Hi. I've just added a PIX 501 to my network and have noticed that with the default configuration the Firewall is repsonding to external pings/ICMP. The firewall currently has a basic configuration using PAT and connected to a 837 Router. From reading...

I have multiple remote sites that VPN into a 3000 Concentrator; each site has a 1710 router that uses PPPoE (save for one or two exceptions). My issue is that on occasion (between several days to several weeks), the 1710 will either drop the tunnel a...

Hi,Turbo ACL is enabled on PIX 525 which H/W & S/W config details are,Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHzFlash E28F128J3 @ 0x300, 16MBBIOS Flash AM29F400B @ 0xfffd8000, 32KBCisco PIX Firewall Version 6.3(4)ACL compilation taking al...

I see that you can not have RIP and OSPF on the PIX at the same time. Infact the a little message comes up on the PIX 6.3 saying so. Is there anyway around this?TIA!Jeff

Hi,Our internet facing firewall is a Pix 525. For the past few years, we have had active-x filtering enabled, however recently due to business requirements we have had to disable it as there are 3rd party business sites that need to be accessed and t...

I have a remote site that I need to connect to our central site via site to site PIX VPN. I can do that without issue. My question is we also have contractors at the site who only need interent access and should not enter the tunnel back to the centr...

I am wanting to monitor a PIX FW for attempted hacking & VPN events. Are there any white papers/ tech notes that could assist with this? I will be using Cisco Works for Windows to do the monitoring.

Hi,Wondering is someone could help me understand the following.The ASA has defined rules for which it determines whether to deny or permit incoming packets.My understanding is that the ASA tracks the 3 way TCP handshake to the point where is knows wh...

Hello,Let's say you have three interfaces with the following security levels: inside (100), outside (0) and dmz (30).If you set an ACL on the DMZ interface with permit ip any any, will the DMZ be able to access the outside but not the inside? In othe...