Network Security

I have a faily basic config here, and I can't get it to work :( I have a couple Citrix servers, web, and a mail server behind my pix. They all have static ip's, so, I want to nat them at the firewall to re-direct to my internal servers. Here is my ...

hello,I need help to solve this situation,I'have got a lan with two routers connected to internet.I'm trying to protect this lan using only a 506e pix.my lan is connected to the inside interface, while my routers are connected to the outside interfac...

I am considering using my ACS (TACACS) to authenticate administration users on a new VPN 3000 concentrator. My concern is that there does not appear to be a fallback authentication method such as in the routers. Does anyone know if there is indeed a ...

I started using 802.1q and VLAN, and need 12 different levels, but, The command reference for 6.3 says only 6 are available:Enter 0 for the outside network or 100 for the inside network. Perimeter interfaces can use any number between 1 and 99. By de...

Dear Friends, Around 300 dialup clients are connecting to my PIX from various public ip assigned internet pc's,whereas they will be assigned an ip from the pool of my pix to access my LAN.Now we are moving to all the clients to cisco isdn routers wit...

Hi everybody,Could anybody help me?I'm at customer'e facilities and we want to upgrade PIX 525 sw. Current verion is 6.0(1).Are we allowed to upgrade to 6.2(3) ? And if yes, what about license key, should we request a new one ?If we are not allowed t...

We have two private line T-1s coming in from customers that directly connect to our network and we decided we needed to put a firewall up between their networks and ours even though there is no public traffic traversing any of these connections. The...

Hi all,I have a customer who has a PIX 515E, 2 interfaces (inside and outside). He has an SMTP server on the inside network. I've permitted the necessary couduit to allow SMTP from the outside to the SMTP server. Mailguard is enabled (fixup proto...

Hi,we have an rpc application through the PIX. the client and server are on different segments of the firewall. rpc timeout on PIX is set to 10 minutes. sometimes we have a problem like this: client tries to send a new request to server on its establ...

We have just recently aquired a 515 and have loaded the latest code rev's for ios and PDM however on the bench the laptop we are connecting to the inside does not run up PDM it just shows page cannot be displayed. we have used the default wizard to s...

I need to give users access to an outside registered IP address. But instead opening up the firewall to that registered IP address I would like to have an internal address being mapped to the external address, so that users in stead of connecting to ...

Hello,is there a possibility to configure a policy routing at the pix firewall.I want to configure a policy routing at the pix that only traffic from a special IP address routes over a special gateway all other traffic should use the default standard...

I am in the middle of changing from a 520 to a 515. I have moved everything except the VPN tunnels. I an getting the following error, when I enter the "no sysopt route dnat" command."The sysopt route dnat option has been deprecated"Any thoughs.The ...