Network Security

If somebody asks a question that what is special in PIX firewall which is not in router's ACL control lists.I mean the benefits of using PIX firewall over router's ACL. Pls help me to differentiate this.

I feel funny about asking this question since I have ANSWERED some much more difficult. However, I am having an issue loading PDM from a tftp server onto the PIX...I know that PDM is already on it, but I am having a problem getting it going..Any sugg...

I have a 501 firewall for the past couple of years at a client site. In recent months they have a growing problem of a random users not able to connect to the Internet. Typically 1-2 users are able to connect in the morning and then the next user i...

Hello,Could anyone help me with a configuration for a Cisco 837 router and a Cisco PIX 501, while getting only one IP address from the ISP, because of the use of ADSL as connection?Must I configure the 837 router as a bridge by entering "no ip routin...

Hi, in my company I have 3 routers Cisco2600. For 2 of this router I have configure a HSRP protocol with wirtual IP 192.168.3.10/22 (the physical IP address of the ethernet interface is 192.168.1.10/22 and 192.168.2.10/22). The other router have this...

I found the link below about how to set up an ACL for blocking P2P file sharing. My question is that I was under the impression that the PIX blocked all ports coming in by default and that the only ports allowed are 80 and those defined by the fixup...

I have a test ids executing a shun to a PIX over ssh. We see the signature fire, the sensor status shows the ip address of the offending host being shunned, and a time limit of 15 minutes which we have set. On the PIX, we see the ids sensor logged ...

Has anyone else noticed the Chemtrails in the side picture of the PDM 3.0(1) Startup Wizard?Are they suppost to be Chemtrails? or something else entirely? perhaps something artistic?CheersRob

Hi folks!We're a small company running a PIX 501 device as our corporate firewall. We have a DMZ set up inside our firewall, with the bulk of our internal network being behind a Linksys router - we have a webserver sitting in the DMZ at the moment. O...

Hi there,I'm looking for a method to match packets on their specific length and either deny or allow them out of the interface. I know router IOS supports it via policies and 'match packet lenght' command. So far I wasn't able to find anything of thi...

I am implementing a hub and spoke VPN with 30+ 831's connecting to a central pix 515 using ezvpn. 831's are in network extension mode with split tunneling and each with a non-overlaping private subnet (192.168.x.x). Connectivity is working fine, but...

Will Split Tunneling work when using a VPN3002 Hardware Client in Network Extension Mode? I have enabled Split Tunnelling on the 3030 Concentrator. It seems to tunnel the correct networks but it doesn't send the networks in the bypass list to the int...

We have a 515 with 1 outside, 1 inside and 3 DMZ’s. We want to allow some of the hosts on the DMZ’s access to the Internet using PAT to the outside interface address. However I can't get this to work.The DMZ interfaces have inbound ACL’s defined to a...