Network Security

Hi,I am a newbie to PIX and I have two basic questions:1. I want the PIX to route between the DMZ and inside networks. I do not want any nating going on - I want the inside addresses to appear as such on the DMZ and vice versa - in other words the PI...

Dear Sir,We want to setup a Data Center Network for core banking with all the application and Database servers.For the same we are planning to design a Two-Tier firewall network architecture. First Tier firewall (Cisco PIX in failover mode) will have...

We want to connect our branch offices with VPN using PIXes. What are the ups and downs of using PIXes vs. using regular Cisco routers to do this?

Help -- I am trying to create a workable config for the Polycom desktop videoconferencing CODEC going through our PIX 525 IOS 6.3.4. Our Gatekeeper is running on a 7206 VXR in front of the PIX which is running IOS 12.3.8T. The probelme is that the in...

I have problem with configuring the alarms on IDS 4.1 when ACL violation syslog message is received. I have simple config on the router:access-list 120 deny ip any host 10.10.17.254 logaccess-list 120 permit ip any anyinterface Ethernet0/0 ip address...

Wondering if CSA agent for Linux is available yet? If yes, In our scenario we have two web sersers are in DMZ segment and once one is active and other is passive mode and is waiting for failover, question is do I need separate csa agent for active an...

Does CSA server agent supports HP-UX and ORAcle applications?if not, any possibilities?

My company is trying to extend our network to remote offices in the US and abroad. I have seen several examples of configurations for single site to site tunnel termination, but never any for several remote tunnels back to one PIX. I would use the re...

I have a PIX-514 configured for SSH. I also have a 4210 IDS on the internal network. At one time I know the IDS would shun (using the firewall). I believe that if you do a show ssh sessions on the firewall you will always see the IDS as connected. I ...

What engine parameters would be acceptable to tune out false positives. I do understand that this is network specific, but was looking for other's averages. SERVICE.SMB (6255)? I'm thinking HitCount= ~25FLOOD.NET (UDP)? I'm thinking Rate=4900FLOOD.NE...

We have 2 4235 NIDS devices that are run by a Security Monitor VMS server. Up until version S128 we were able to upgrade both devices through the MC, however this function has stopped working. The subsequent updates (S129 thru S135) appear to have wo...