Network Security

Hi,since I upgraded our redundant PIX 515E from 6.3(1) to 6.3(3) there is a noticeable higher amount of dropped packets (x5).The dropped connections are equal in one point: While closing the tcp client/server session, there is a RST packet involved (...

I'm running scans against multiple PIX firewalls running both 6.3(3) and 6.2(2) code using NMap, Nessus, and GFI's scanner. All scanners show the expected ports open but also always show TCP 80 open as well, which is not open in the ACL nor statical...

Hi,Which are the requirements for using the "isakmp nat-traversal" command in pix software 6.3.3?Some pointers:- Is it necessary to use EasyVPN or one can use the traditional method?- Is it necessary to use "isakmp identity hostname" or it does not m...

Can anyone provide me a "matrix" of some sort comparing the features af the restricted and unrestricted liscence options for the PIX 515e firewall? Ex.. concurrent connections, throughput, and the likes.I found a document for the Pix515 but not the 5...

Is there, anywhere, some document that compares/contrasts setting up two PIX's in failover mode versus load balancing them as discussed in this document?http://www.cisco.com/en/US/customer/products/hw/contnetw/ps789/products_configuration_example0918...

In release 6.3.3, does the pix no longer implicitly permit traffic from a higher priority interface to a lower priority interface other than the respective inside and outside interfaces? Or, is this a caveat in the code itself? For some reason, I am ...

Is there a way to configure the console on a PIX so I can connect a modem?If so how?

Silly question:If I have 5 licenses for CSA in place - should I purchase and install another 5 licenses for a cold DR environment or I could use same licenses (will it work from legal and tech side)?

Hi,I have VPN 3000 box 3.6.7. I need to enable RIP v2 on outside interface. My problem is that I cannot find where I should specify that RIP v2 will use MD5 authentication and where I should specify RIP v2 authentication key. I look through the manua...

Ok, I've got 30 LAN to LAN sites configured, up and running on a 3015. But the last one is killing me. It connects for about 20-40 seconds, disconnects and starts over. Here is an exerpt from the 3015 log, the ip's have been changed to protect the gu...

Please can you help with this, the scenario is as follows: internal ip address allocation: 192.168.1.1 - internal pix 192.168.1.2 - file server (2k domain) 192.168.1.3 - exchange server 2k - SMTP 192.168.1.3 - Outlook web access 192.168.1.7 - ftp ser...

Hi,I just learned that the IOS version I have on oneof our routers has the Cisco IOS Firewallcapabilities built in. Because I am unfamiliar withthis technology (IOS firewall), I would like someoneto chime in with his/her observations on thisfeature....

Hello All;I was wondering if I could ask for some assistance. I am very new to configuring PIX devices, and I am currently having a problem allowing external users to access some of our servers.I am trying to allow http, smtp, pop3, and RDP (port 33...

Hi,I have a PIX 515E with 3 interfaces, I need to use one interface for the inside network and the other two interfaces with two different ISP one of this ISP has a static public ip address and the other has a static public ip address asigned via a r...