Network Security

Just wondering if anyone knows the performance impact of a 9,000 entry ACL? Also, is there a limit to the number of ACEs on a PIX? Thanks.Jeff

i have made this config from the cisco website. will this config work for me, so that my exchange smtp traffic comes and goes thru this pix.nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 dmz security50enable pas...

I am setting up a DMVPN with two spokes. The hub is a 1760 witch is located behind a pix 515. What ports have to be opened on the pix to allow communication from one spoke to the other?Thanks in advance!

Hello,I've configured a VPN from outside and it works fine. The problem I have is about the access to internet.The address pool to the VPN connection is not within the inside range. And I don't know which gateway I have to configure the VPN clients i...

Upon successfully connecting to Concentrator 3000, I realised, on the Ethernet adapter, that my ISP DNS entries were replaced and new WINS entries were added according to my DHCP server options 006 (DNS Servers) and 044 (WINS/NBNS Servers) respective...

I have a pix 515E with only two interfaces, an inside and an outside, but I need to connect two T1 internet connections on different subnets to the outside interface. I have a Cisco 3550 switch on the outside between the routers and the pix. I've bee...

I am setting up a Guest VLAN 25 to provide isolated access to the internet. It is not to have access to any internal networks. This VLAN is configured to give out DHCP addresses on a 192.168.25.0/24 subnet.The operational VLAN 1 is on 10.1.0.0/16. I ...

We have a PIX 515e with six interfaces. One interface is the DMZ with public addressing. One of the other interfaces is the inside which is using private addressing. The command below disables translation for the DMZ network because all servers are p...

Dear all,I am trying to configure a 'virtual' VLAN interface on the PIX.I have created the virtual interface off of our e0/2 interface (DMZ) and given it and IP address in the 192.168.100.X/24 range.I have also created a VLAN interface (VLAN 10) on t...

I am trying to configure VPN Concentrator 3000 DHCP to set Windows 2000 Pro "Connection-specific DNS Suffix" to "windows.ap.mycom.com".So far, "windows.ap.mycom.com" always goes to "DNS Suffix Search List" when I "ipconfig /all".Anyone knows what I a...

I am using PIX 515E. Internet connectivity is through satelite and is connected to the outside interface of the PIX. I wantto have a dial back up using normal Analog lines so that in case of satelite link failure pix can route the traffic through Dia...

Has anyone heard a time estimate for the release of pix software 7? I've heard it rumored for a long time now but it has gone silent recently. Any info would be appreciated.ryan

Can someone advise me on what would be the better solution for the following:A Hub and spoke network, new sites are going to be joining the main hub with PPP T1's, I still have to keep my network (main hub) protected and everyone else behind the PIX,...

I am trying to get a PIX running 6.3.3 to request a certificate from a Win2K server running certificate services. The server is running as a stand-alone root CA.The PIX config's for the CA access are:name 172.10.224.5 ca.lab1b972.comca identity ca.la...