Network Security

I have had a question posed to me by a customer. I had requested that for config management we have two way TFTP access. They have asked why use TFTP and not SCP ? Can you use scp to copy the configs from a Pix and if so how ?

Hi,Recently I have to install a PIX with three interface to protect a MS Exchange System. A front end exchange 2003 server will be placed in the DMZ. A back end Exchange 2003 together with the Domain Controller, Global Catalog Server will be placed i...

We are implementing pix to pix vpns so in case our t1 goes down it will go to our backup cable modem and create a pix to pix vpn connection..I want to learn how to work with this, so I can contribute.. my question is.. how do I do that? Where do I ...

I have had a question posed to me by a customer. I had requested that for config management we have two way TFTP access.They have asked why use TFTP and not SCP ?Can you use scp to copy the configs from a Pix and if so how ?

Looks like an IDS sensor will lost communication with PIX firewall(s) if primary will failover to secondary in the redundant pair (if SSH used as a transport method - public key will be diff for the same IP). Unfortunately I don't think there is an e...

I have a static vpn between a main site and a remote site configured on a PIX. When I connect in via a dynamic vpn from my laptop I am not able to route through the other VPN to the remote site. Is there a work around for this on the PIX? I assume...

Hello,We have a VPN Concentrator 3005. We want to monitor the bandwidth of the Lan-to-Lan IPSec connection using MRTG. Can somebody help me in getting me the correct OID?TISSaswata

Does anyone know what will happen if there are no IP addresses available to assigned someone using the Cisco VPN client via dial-up? In other words, will the PIX still establish the VPN connection and assign an IP address eventhough on is not avail...

Hello ,In user tracking under Campus manager, I'm getting MAC addresses , hostnames and IP address of the station and Username column is empty. How to get usernames?. From Ciscoworks manual, it says that I have to run UTLite script ?. Where I can fin...

OK,This was working just fine till about a week ago.Their is a group A behind pix 506 "A". I can vpn in from just about anywhere.Except, Behind any other firewall.Group B, behind firewall pix 506 "B" can not see or connect to any resources in group "...

Hi. I've just added a PIX 501 to my network and have noticed that with the default configuration the Firewall is repsonding to external pings/ICMP. The firewall currently has a basic configuration using PAT and connected to a 837 Router. From readi...

I have multiple remote sites that VPN into a 3000 Concentrator; each site has a 1710 router that uses PPPoE (save for one or two exceptions). My issue is that on occasion (between several days to several weeks), the 1710 will either drop the tunnel a...

Hi,Turbo ACL is enabled on PIX 525 which H/W & S/W config details are,Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHzFlash E28F128J3 @ 0x300, 16MBBIOS Flash AM29F400B @ 0xfffd8000, 32KBCisco PIX Firewall Version 6.3(4)ACL compilation taking ...

I see that you can not have RIP and OSPF on the PIX at the same time. Infact the a little message comes up on the PIX 6.3 saying so. Is there anyway around this?TIA!Jeff

Hi,Our internet facing firewall is a Pix 525. For the past few years, we have had active-x filtering enabled, however recently due to business requirements we have had to disable it as there are 3rd party business sites that need to be accessed and t...