Network Security

Can regex be used in the Service Ports field when tuning signatures? If so, what is the negate expression. If I want to exclude port 53 from a sig would I put in "!53" or "?!53"?

Hey guys,I just need to make sure that I understand a couple of things correctly. The native VLAN (VLAN1) will not work with a PIX set up for VLAN support through logical interfaces, correct? Does this mean that I simply need to re-assign all of the ...

I’m trying to configure the following I have a Pix525 with 3 physical interfaces. The DMZ interface is configured for VLANS. Only 2 vlans are used, native (matching up to VLAN1 on my switch) is used for my DMZ servers and VLAN 55 is used to connect t...

Hi everyone,I'm planning to put a PIX 525 between our Web Server and a Database server. Let's assume the Web Server has IP of 192.168.3.5 (netmask 255.255.255.0) and the DB server has IP of 192.168.2.6 (netmask 255.255.255.0). The port I'm going to u...

CSA agent will be suspended/terminated abnormally by malicious code or loop-hole of the OS kernel like what happened to certain Antivirus software?Please comment, thanks.

how do i do tcp load sharing in the pix DMZ.that is i have 3 web servers and i want to nat all of them to a single global ip address for roundrobin basis of servicing web request from the internet.can i put three statis statements for these web serve...

Running 6.3(3)122 on pix and 12.2(8)T on 1721Pix is at home on SBC DSL and 1721 is @ office on SBC DSLAnyone tell me why PIX might be resetting?Or tell me what logging option to use?Chris

I have a customer who is trying to conserve their public IP addresses. The VPN 3005 is behind a failover PIX firewall in a DMZ zone, and I originally tried using static NAT on the PIX for the public IP of the 3005. However none of the LAN-to-LAN tunn...

Hello,forgive me if i will stress again about signatures update through VMS IDS version 2.0.Since i installed it, i'm experiencing a well known problem related to the following error message:Sensor ids-mo-dis-2: Signature Update ProcessAn error occur...

Hi All,I have the following scenario.Currently have 1 internal network connected to pix.Would like to add a second using a lvl 3 managed switch connecting to the pix. So both networks connect to the switch then switch to pix.Primary concern is can th...

Hi!Would it be possible, using Cisco PIX, to set up a lan-to-lan VPN where the peer has a dynamic ip?The peer-command doesnt seem to accept a hostname (as something.dyndns.org).What about IOS? Is it possible there?/Thanks

Have overlapping network 172.16.9.0. Trying to follow the link according to which this scenario will work. http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#wp1113571The scenario is not working. This is what I f...

Please advise if this is the correct part for a 4250XL sensor Mfg # NET912-3 MTRJ 62.5/125u Multimode Duplex Fibre Cable 1 MetreTIA.Simone

Hi,we are trying to setup a windows media 9 server (windows 2003) behind a pix firewall. We first started by opening the tcp and udp ports by Microsoft documentation ie:tcp port 1755tcp port 554udp port 1755udp port 5005The clients comming from the i...

Hi all,I had a co-worker tell me that the PIX is not an enterprise solution. Since I've never worked for a large corporation, I couldn't say if he was right or not. Your thoughts? Also - has the PIX OS ever been compromised?Thanks in advance!Andrew