Network Security

Can someome please help:I need to limit a group of IP addresses that access the Internet through a PIX 515. I only want them to have access to 20 or so web sites.I only want IP-address(inside) to be able to access IP-address_1(outside),IP-address_2(o...

I have a PIX 515e with UR licence. When I enabled OSPF on the pix, the pix suddenly hangs intermittently. As soon as I disable OSPF, it returns back to normal. Any ideas on how to fix this. The pix has 64 Mb of RAM. do i need more?

Hi We are using Snort and get follwoing log message: 06/23-19:21:41.146900 12.107.140.x -> x.x.x.x ICMP TTL:117 TOS:0x0 ID:17311 IpLen:20 DgmLen:28 Type:8 Code:0 ID:512 Seq:10288 ECHO [Xref => http://www.whitehats.com/info/IDS162] 12.107.140.x is out...

Where can I find what these flags mean?Thanks

What version of PIX OS which PIX MC support? Now I used 6.1(5) it's error when import device that not supoort PIX OS 6.1(5)

Here is a question for Pix gurus:What puts a heavier load on a Cisco Pix firewall:- 4000 DNS requests generating 1 MB of traffic or- 1000 HTTP requests generating 50 MB of traffic or- 10 FTP downloads generating 500 MB of trafficIs the Pix using more...

Hello,Pix 515e, v6.3.1I'm running split dns and things are running ok. However, if I have a host defined in a static statement the Pix will doctor the dns replies when I query an external name server via a LAN workstation.For instance:static (inside,...

In normal cases; The PIX ( 515 ) CPU usage is about 10%, but temporary it jumps to 99% with less than one minute and get inaccessible; where the failover PIX get active until it’s CPU also get saturated and come back inactive.I separated all the inte...

Hey all, I looked around but didn't see this before. I'm running two 515's in failover on 6.3(3). Over the weekend, the Turbo ACL (only 32 elements) applied to my outside interface stopped working. This happened at 4am, so it wasn't due to any change...

I have a router to router VPN architecture, hub and spoke in design, with public addresses on the outside interfaces, and private addresses on the LAN side. I'd like to force all syslogs from the routers through the VPN tunnel to a privately addresse...

I am trying to upgrade my pix firewall but the only available way to do this is through the copy tftp flash command but I am having problem getting this to work because the only way my boss will let me on to the firewall is through console and I can ...

Hello AfaqHow can i decide my customer to purchase a PIX better than an upgrade of it's 7200 to a IOS FW ?Is it better to use a PIX ?If yes why.Do the PIX offer SSL for wireless encryption ?thanks for your help

Dear FriendsMy client has a PIX 520 with no extr slots for DMZ, how isit possible now to create a DMZ, can i add another rthernet card or port. i am asking because 520 is an end of sale product.IOS version is 4.2can i do something to this box now ?th...

Does anyone know if NATing a BGP peer's address on the PIX with MD5 enabled is achievable? I know the 'norandomseq' tag on a static will work for a regular BGP implementation, however this did not work for a NAT implementation. Cisco doc for BGP peer...