Network Security

Hi, I'm trying to enroll my PIX for a certificate.Getting the CA certificate with 'ca authenticate...' works fine and 'show ca cert' shows the CA certificate.When I try to get a CRL och enroll for a certificate however the CA sends back the message b...

Hi all,Is it possible to replciate the configuration of a PIX failover bundle across a wan link to another failover bundle? The idea is to set up two exits out of our network. While traffic can be re-routed in case the primary gateway fails, our conc...

We're having an issue where we can't send mail to ourselves. Mail will successfully come from outside sources to mail.domainname.com but if we try it internally it won't allow the traffic through. If I try to telnet to port 25 from a machine on the...

When a user has established a VPN connection to a PIX using the the Microsoft PPTP client, does he still have access to Internet?If we use the Cisco VPN client to established a VPN connection to a PIX, we have to enable Split-tunneling to be able to ...

Hi All,What is the normal effect on routing tables and routing protocol advertisements when directly connected interfaces go down ?Imagine a 506e with the following config...Inside - 195.105.100.0/24Outside - 192.168.0.1/30A host on the inside on add...

Solaris server is replying with icmp unreachable when cisco device tries to send syslog message on port 514.I can see the syslog entry come from the switch and the server is replying with an icmp unreachable msg. I have the syslog collecter running, ...

My Pix 515E model tears down my TCP connections in 4 in a very short about 4 seconds even though the timeout conn half-closed is 0:10:00 (10 minutes). How can I prevent the Pix box from tearing down my tcp connnections so fast? Below are my timeout s...

hiWhat is the MIB to pull the temperature off a 2651XM and a 3745XMthanks

Hi,Could anyone shed some light on the following problem I am having?I have set up a site-to-site VPN, and am able to have traffic encrypted/decrypted perfectly when protecting ALL IP traffic between local and remote hosts. My problem lies when I wan...

What is the difference between the hardware output queue and software output queue?sh int e0 shows my hardware output queue stats constantly at 128/128 but the software one is always 0.

Interestingly today was going along so good when just as I was about to leave to go home a problem arrived in my inbox - figures. The problem has to do with email. well you ask..this is a firewall forum not about microsoft exchange. well let me finis...

Hi I have configured a Dual Hub - Dual DMVPN Layout and want to use one single DHCP sever on the central site. I have configured "ip helper-address addr_of_dhcp_srv" on the spokes and I can se in my debug that I receive a broadcast bootp request from...

Hi Guys, How are you?I have some problem with PIX 506E NAT’s configurations. I saw that to allow traffic from lower security interface to higher security interface I need to create a STATIC NAT entry or use a NAT EXEMPTION based on ACL. But I have so...

I have a Pix 515e and will access to a Ctrix Server behind the Pix .I open the Port 1494 TCP and 1604 UDPbut a can not browse for Citrix Applications .