Network Security

I have managed to get a pix firewall to communicate with an snmp monitor on the far side of a vpn tunnel. I would like to use snmp to monitor the state of the vpn tunnels on my pixes (even something as simple as "current state = QM_IDLE", for example...

Does anyone know if a Microsoft ISA server can be used in conjunction with a Pix firewall? I know the PIX works with N2H2 and websense for filtering, but can it work with ISA? The workstations have a "client" loaded on them, and if the ISA server bec...

Hi,I have a customer which has 6 cat6500 in the core and is looking for an ids solution.Beside the idsm-2 he wants to evaluate snort. As i have no experience on that product i'm advised on your help/input:-Pros/cons-where to deploy ids sensors-is sno...

hello, my client has a pix 501 firewall/router. I need the commands so i can see the current config of the device. i searched the site and found a link but just reading it gave me a headace. i really dont do much cisco so any help would be appreciate...

I have a PIX 515 UR that will no longer boot up (hardware details below - running software v5.1.2)On a normal boot, when attempting load it gives "Panic: kernel - The checksum verficiation for this image failed", then reboots.The PIX will boot into m...

Dear All,I have to submit VMS documentation ( wht it is , wht it can do , wht im doing with it, how it helps to the organisation ) to my customer. im already using it. pls , can any body provide some links r guidelines to prepare this ( 20 to 30 page...

Cisco PIX document states that - If the two units are more than six feet apart, you can use the same Ethernet state link as the failover link, but we recommend that you use a separate Ethernet link if available. http://www.cisco.com/univercd/cc/td/do...

Hi,It is recommended on following URL that crossover cable should not be used for PIX LAN based failovers. Does anybody know what is the rationale behind this recommendation and why a switched connection is recommended between Pri and Stby PIX firewa...

Can I create a VPN tunnel where the remote router is behind a gateway router that uses Port Address Translation? In other words, one public IP for the entire private network? We're using a Concentrator 3005 at our corporate location and an 831 at the...

At my new job, I am no longer in the role of supporting our Firewall/VPN (all done at Corporate). I've recently been told that they are replacing all of our PIX firewalls with 1721 Routers to handle our Firewall/VPN connections. My previous experienc...

Hello all, I have a PIX 501, that currently is configured using the 192.168.21.x internal subnet. Because of various vpn issues and other problems not related with the PIX, I would like to change the internal range to 10.x.x.x. For some reason, I rem...

I have a VPN3002 Hardware Client (172.16.1.x) that is accessing a VPN3005 Concentrator (192.168.x.x) in Network Extension Mode. On the VPN3005, I have a LAN-to-LAN connection to another VPN device. I can access addresses in all scenarios except for f...

I am experiencing difficulty in allowing my VPN clients to browse network resources by IP and by NETBIOS names.My clients connect and authenticate fine. Any suggestions on what might be causing the problem?I do have VPDN entries that point to the pro...

hi,i want to know difference between restricted and unrestricted pix firwall.Arun Kachroo

Dear All ,iam getting lot of alerts on 9017 - Back Door Probe (TCP 5401) . i found in my vms server ( D:\Program Files\CSCOpx\CSAMC\cfg ) ssl-bundle file [BUNDLE_CONF]mc.server_cert_cn=itvmsmc.http_port=80mc.https_port=5401mc.alt_https_port=443is tht...