Network Security

The pix 525 had blocked some of the service to the outside world.e.g the public cannot ftp the server.However I can use nmap and superscan to scan the block service,of course the ftp cannot be login.what can i better the firewall rule so that cannot ...

Hi all,I have 2 hopefully easy questions. Here goes:1. I want to use my internal DHCP to assign addresses to my VPN clients. Can this be done? Is this feasable through the PDM?2. Can I assign a default gateway to my clients with the IP pools?Thanks i...

I have been using my PIX 506e with a outside IP address assigned via DHCP. My PIX sits between the building's router and my network switch. The router administrator has assigned me a static IP address. When I change the outside IP address from dyn...

Hi,I am working with CiscoWorks RME3.5. The Inventory management and the Syslog analyser work well, except the configuration management. Ciscoworks can not fetch config of our Cisco Catalyst switches, because of the SSH session failure. The messeage ...

I have configured the Cisco VPN3005s before. However I have come across a problem that I cannot resolve. In this situation the VPN client cannot ping to any devices on the private side of the VPN. The client when VPN in show the secured route to th...

I have a PIX 515 and many many VPN clients spread across. They connect using VPN 3.1 and above clients (depending on which OS they have). They all have cable modems and none have been having trouble...UNTIL THIS ONE.She is consistently having trouble...

I have a pix running 5.1.These are my current NAT entries.nat (inside) 1 0.0.0.0 0.0.0.0 0 0static (inside,outside) 199.1.235.192 192.168.235.192 netmask 255.255.255.255 0 0static (inside,outside) 199.1.235.135 192.168.235.135 netmask 255.255.255.255...

Dear all,Is PIX support policy routing?Thanksmak

Dear Sir,I have a question on CBWFQ + WREDfor examplepolicy-map test class ftp-trafficbandwidth 2000random-detectclass otherfair-queueMy requirement is to give minimum bandwidth to all ftp traffic on my wan link and also reduce packet loss by using c...

Dear All,I am a beginner in QoS. I have three classes of traffic on my 100M link. For class A, I would like to police it to 10M, for class B, I would like to shape it to 10M(peak), for class C, I would like to give it highest weight during congestio...

How do I configure some kind of QOS for traffic inside the tunnel ?I have a remote office connected via a IPSEC VPN tunnel to our HQ VPN concentrator and wat to prioritize VOIP traffic inside the tunnel.is there some good documentation on the cisco s...

Ok, what is the trick to issue a no shut to a PIX Gig interface? I tried every possible combo of the syntax?

I have a strange problem. My PIX is logging fine to my messages file but I am unable to get it to log to my LOCAL# file. Do I need to reload the PIX to get this change to take effect? I have attached the piece of the config and the syslog.conf. I hav...

I am in the process of migrating some of our call centers from ISDN circuits to VPN. Currently we have a Cisco 3060 concentrator as our head router and using a pix 501 from the one user call center. Each call center consists of one user a pix 501, bu...

Hi All, Had an interesting question from a customer this morning. They have an Enterasys Dragon IDS appliance and were wondering if it could interact with a PIX for shunning. Anyone seen or tried this? Some input would be appreciated. Thanks Ali