Network Security

Hi there,I'm looking for a method to match packets on their specific length and either deny or allow them out of the interface. I know router IOS supports it via policies and 'match packet lenght' command. So far I wasn't able to find anything of thi...

I am implementing a hub and spoke VPN with 30+ 831's connecting to a central pix 515 using ezvpn. 831's are in network extension mode with split tunneling and each with a non-overlaping private subnet (192.168.x.x). Connectivity is working fine, but...

Will Split Tunneling work when using a VPN3002 Hardware Client in Network Extension Mode? I have enabled Split Tunnelling on the 3030 Concentrator. It seems to tunnel the correct networks but it doesn't send the networks in the bypass list to the int...

We have a 515 with 1 outside, 1 inside and 3 DMZ’s. We want to allow some of the hosts on the DMZ’s access to the Internet using PAT to the outside interface address. However I can't get this to work.The DMZ interfaces have inbound ACL’s defined to a...

What is the best s/w for pix logfiles analysis...?I need a professional one.....

What is the best s/w for pix logfiles analysis...?I need a professional one.....

What is the best s/w for pix logfiles analysis...?I need a professional one.....

hi,I have enabled ip audit on my pix. I get some information logs but now I can't find anything on this site regarding the signature ids.I know that there are around 55 ids but what are those? is there any link with a description of all 55 signature?...

Dear All,May I know if NBAR can effectively identifiy all BT traffic(or other peer to peer applications). Can it identify BT traffic if it is not using well-known port ?thanksEric

I am wanting to place both call managers and our unity servers behind our firewall, but I need to know what to put in our PIX 525 firewall to assure that the proper ports are open for our IP phones to access these servers. IOS on the PIX is 6.3(4). ...

Hi,I have a very small question about the PIX Entries.Can anyone tell me..How many maximum pat entries allowed in PIX 515.Will appreciate for the quick answers.ThanksIrshad

I am trying to allow remote access to the LAN sitting behind my PIX. I am using the Cisco VPN client and have maaged to get authenticated, but I am unable to see the LAN (10.254.254.0/24) behind it. Any clues as to what I am missing?Also I am tryin...

We have a PIX 525, running 5.0(2), in our network. For the as long as I can remember workstations behind the PIX were able to connect to FTP servers on the Internet using either active and passive FTP. We rebooted the PIX recently (which had been up ...

Does anybody know if PIX support /31 subnetting ?So 255.255.255.254 ?I saw Version 6.3.3 seems doesn't support it...Pls let me know.Tks